4
Test Kitchen
Test Kitchen is a free test harness for executing infrastructure code in isolation on one or more platforms.
Free planOpen sourceAPILinuxmacOSSelf-hosted
7.2Free plan
Visit
5
kube-score
kube-score statically analyzes Kubernetes object definitions and recommends changes intended to improve application security and resilience.
Free planWebLinuxmacOSSelf-hosted
7.0Free plan
Visit
6
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows
6.8Free plan
Visit
7
Kubetest2
Kubetest2 is a free, open-source framework for deploying Kubernetes clusters and running end-to-end tests against them.
Free planOpen sourceAPISelf-hosted
6.8Free plan
Visit
8
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS
6.2Free plan
Visit
9
KICS
KICS is an open-source static code analysis solution for finding security vulnerabilities, compliance issues, and infrastructure misconfigurations in…
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
10
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted
6.2Free plan
Visit
11
OpenSCAP
OpenSCAP is a collection of open-source tools for security compliance and automated vulnerability assessment using the Security Content Automation Protocol (SCAP).
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
12
Terratest
Terratest is a free, open-source Go library for writing automated tests for infrastructure code.
Free planLinux
6.2Free plan
Visit
13
TFLint
TFLint is a free, pluggable command-line linter for Terraform that checks configurations for possible errors and rule violations.
Free planLinuxmacOSSelf-hostedWindows
6.2Free plan
Visit
14
cfn-nag
cfn-nag is a free static analysis tool that scans CloudFormation templates for patterns that may indicate insecure infrastructure.
Free planLinuxmacOSSelf-hosted
6.1Free plan
Visit
15
cfn-lint
cfn-lint is a free, open-source tool for validating AWS CloudFormation YAML and JSON templates.
Free planLinuxmacOSSelf-hostedWindows
6.0Free plan
Visit
16
Cinc Auditor
Cinc Auditor is a free distribution of Chef InSpec for compliance and audit workflows.
Free planLinuxmacOSWindows
6.0Free plan
Visit
17
kubeconform
Kubeconform is a free command-line tool for checking Kubernetes manifests before deployment.
Free planLinuxmacOSSelf-hostedWindows
6.0Free plan
Visit
18
Sonobuoy
Sonobuoy is a free diagnostic tool for inspecting Kubernetes cluster state using non-destructive configuration tests.
LinuxmacOSSelf-hostedWindows
5.9
Visit
19
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted
5.9Free plan
Visit
20
terraform-plugin-testing
terraform-plugin-testing is a free Go module for testing Terraform providers.
Free planLinuxmacOS
5.9Free plan
Visit
21
Cloud-Radar
5.4
Visit
22
pytest-ansible
pytest-ansible is a free pytest plugin for using Ansible in tests and running Ansible collection unit tests.
Linux
5.4
Visit
23
TaskCat
TaskCat is free, open-source software for testing AWS CloudFormation templates.
APILinux
5.4
Visit
24
ClusterLoader2
Self-hosted
5.3
Visit
25
Molecule
Molecule is a free, MIT-licensed Ansible testing framework for developing collections, playbooks, and roles.
Linux
5.3
Visit
26
HashiCorp Enos
LinuxmacOS
4.6
Visit
27
kube-bench
Linux
4.6
Visit

Back to Serverspec