18.2
Kubescape is an open-source Kubernetes security platform for coverage across configuration, vulnerabilities, compliance, and runtime activity.
Free planOpen sourceAPILinuxmacOS
Alternatives to TigerGate IaC Security
27.9
Aikido CSPM gives teams a consolidated view of cloud misconfigurations, exposures, overly permissive IAM, and compliance gaps.
Free planWebAPILinux
37.7
AWS CloudFormation models, provisions, and manages related AWS and third-party resources as infrastructure as code.
Free planiOSWebAPI
- 4
Kyverno
Kyverno is a free, open-source policy engine designed for Kubernetes.
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 5
CFRipper
CFRipper is a free, open-source Python library and command-line security analyzer for AWS CloudFormation templates.
Free planOpen sourceWebLinuxmacOSSelf-hosted7.5Free plan - 6
audytx
audytx analyzes AWS infrastructure code and Terraform pull requests, presenting security and cost findings in GitHub and to coding agents.
Free planWebAPI7.2From $20 a month - 7
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 8
KloudSec IaC Security
KloudSec IaC Security scans Terraform and CloudFormation changes in pull requests to identify infrastructure misconfigurations before merge.
Free planWebAPILinuxmacOS7.0From $79 a month - 9
kube-score
kube-score statically analyzes Kubernetes object definitions and recommends changes intended to improve application security and resilience.
Free planWebLinuxmacOSSelf-hosted7.0Free plan - 10
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 11
Conftest
Conftest is a free utility for testing structured configuration data, designed especially for CI environments.
Free planLinuxmacOSWindows6.8Free plan - 12
Winfunc Infrastructure Scanner
Winfunc Infrastructure Scanner analyzes infrastructure-as-code, cloud configurations, and container definitions before production.
WebAPISelf-hosted6.6$500 one-time - 13
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 14
Gomboc AI Code Security Platform
Gomboc AI Code Security Platform analyzes infrastructure-as-code and creates fixes as pull requests for developers to review and merge, rather than changing code directly.
Free planWebAPIExtension6.2Free plan - 15
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted6.2Free plan - 16
cfn-nag
cfn-nag is a free static analysis tool that scans CloudFormation templates for patterns that may indicate insecure infrastructure.
Free planLinuxmacOSSelf-hosted6.1Free plan - 17
DryRun Security IaC Security
DryRun Security IaC Security scans infrastructure-as-code changes for security risks, using context from infrastructure and application code.
WebAPI6.1 - 18
c7n-left
c7n-left evaluates Cloud Custodian policies against Terraform infrastructure-as-code assets, so teams can check cloud resource definitions before applying them.
LinuxmacOSSelf-hostedWindows5.5 - 19
4.8 - 204.8
- 21
Snyk IaC
Web4.8