Sonatype Container Scanner
The facts below are what the maker publishes about Sonatype Container Scanner, checked and dated. Our editors have not written about it yet.
Plans and prices
From Sonatype Container Scanner's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Sonatype Container Scanner | Priced on request | Added to Sonatype Lifecycle; contact sales for a customized quote |
The facts
Each one read from Sonatype Container Scanner's own pages, with the date it was checked.
What it does
- Build-time scanning
- Sonatype Container Security scans container images for known vulnerabilities and enforces security policies before images are pushed or deployed.checked 9 Oct 2026
- CI integrations
- Supported CI integrations listed for the scanner include Jenkins, GitHub Actions, GitLab, Azure DevOps, and Bamboo.checked 9 Oct 2026
- Detection
- Container scanning analyzes operating system packages and application dependencies using Sonatype vulnerability intelligence.checked 9 Oct 2026
- Image registry and orchestration ecosystem
- The container security page lists Docker, Kubernetes, OpenShift, Rancher, Amazon ECS/EKS, GKE, AKS, IBM Cloud, and OKE among supported platforms.checked 9 Oct 2026
- Legacy scanner status
- Support for the NeuVector-based scanner ended September 30, 2026, and it is retained only for contractual compatibility without support.checked 9 Oct 2026
- OCI support
- Sonatype supports scanning OCI-compliant container images.checked 9 Oct 2026
- Product purpose
- Sonatype says its container security offerings scan images, identify risk, and enforce policies across the software development lifecycle.checked 9 Oct 2026
- Remote images
- The scanner can scan remote images without a running Docker daemon and eliminates the need for Docker-in-Docker.checked 9 Oct 2026
- Requirements
- The scanner requires IQ Server 1.196.0 or later and IQ CLI 2.6.0 or later; the macOS IQ CLI bundle is not yet supported.checked 9 Oct 2026
- Scanner availability
- Starting with IQ Server 1.196.0, Sonatype Container Scanner is the default container scanner in IQ CLI and supported CI integrations.checked 9 Oct 2026
- Trust and compliance
- Sonatype's Trust Center lists SOC 2, ISO 27001:2022, and NIST CSF 2.0 among its compliance programs.checked 9 Oct 2026
The company
- Founded
- Sonatype's company timeline says it began in 2001 as a project by core contributors to Apache Maven.checked 9 Oct 2026
- Headquarters
- Sonatype lists its headquarters at 8161 Maple Lawn Blvd #250, Fulton, Maryland 20759, United States.checked 9 Oct 2026
Where it runs
- OS package coverage
- Advanced Container Scanning supports APK, RPM/DNF, and APT package databases, while scanning Windows-based container images is not supported.checked 9 Oct 2026
Alternatives to Sonatype Container Scanner
- 1
Mondoo CSPM
Free planOpen sourceWebAPIExtensionLinux7.7Free plan - 2
Grype
Free planOpen sourceLinuxmacOSSelf-hostedWindows7.4Free plan - 3
Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 4
Alibaba Cloud Container Registry
Free planWebAPILinuxWindows7.1Free plan - 5
Trivy
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 6
ZeroPath
WebAPILinuxmacOS6.5From $1,000 a month