Puppet Enterprise provides policy-driven configuration management and infrastructure automation for medium and large organizations handling complex…
Alternatives to Tripwire Enterprise
Kubescape is an open-source Kubernetes security platform for coverage across configuration, vulnerabilities, compliance, and runtime activity.
Chef InSpec checks applications and infrastructure against a desired state described in InSpec code.
- 4

CIS-CAT Pro Assessor
CIS-CAT Pro Assessor scans local or remote systems and reports their alignment with CIS Benchmarks.
Free planAPILinuxmacOSSelf-hosted7.7From $2,400 a year - 5

Mondoo CSPM
Mondoo CSPM scans cloud environments to identify misconfigurations and prioritize them by exploitability and business exposure.
Free planOpen sourceWebAPIExtensionLinux7.7Free plan - 6
Microsoft Defender for Business
AndroidiOSAPImacOS7.5 - 7

Sysdig Secure
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinuxmacOS7.2From $20 a month - 8

Prowler Cloud
Prowler Cloud is a managed platform for finding, prioritizing and fixing cloud security risks.
Free planWebAPILinuxSelf-hosted7.0From $99 a month - 9

Symantec IT Management Suite
Symantec IT Management Suite manages, patches, and remediates application and operating system configurations across desktops, laptops, and servers…
WebAPILinuxmacOS6.8 - 10
Lynis
Lynis is a security auditing tool for Linux, macOS, and Unix-based systems.
Free planLinuxmacOSSelf-hosted6.6From $36 a year - 11
Google Cloud Secret Manager
Free planWeb6.5From $0.02 a month - 12

Prisma Cloud SCA
Prisma Cloud SCA scans open-source packages for vulnerabilities and license-compliance issues across code, builds, deployment and runtime.
WebAPI6.3 - 13
HCL BigFix
HCL BigFix combines endpoint management, security, automation, and digital employee experience capabilities in one platform.
APILinuxmacOSSelf-hosted6.2 - 14
OpenSCAP
OpenSCAP is a collection of open-source tools for security compliance and automated vulnerability assessment using the Security Content Automation Protocol (SCAP).
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 15

DigitalOcean Cloud Security Posture Management
DigitalOcean Cloud Security Posture Management is a web-based, agentless tool for assessing cloud infrastructure security.
Free planWeb6.0From $5 a month - 16

AWS Security Hub CSPM
AWS Security Hub CSPM checks AWS resources against security practices and combines findings from AWS services and partner tools.
WebAPI5.9 - 17
Steampipe
Steampipe lets users query live data from APIs and services using SQL, without first loading it through an ETL pipeline.
APILinuxmacOSSelf-hosted5.9 - 18
CrowdStrike Falcon Cloud Security
WebLinuxmacOSWindows5.7 - 195.7
- 20

Wiz Container and Kubernetes Security
Wiz Container and Kubernetes Security is a web-based service for securing containers, Kubernetes, and cloud environments from development through runtime.
Web5.7 - 21

Rapid7 InsightCloudSec
Rapid7 InsightCloudSec is a web-based cloud security product with asset inventory, multi-cloud support, infrastructure-as-code scanning, identity…
Web5.6From $66,000 a year - 22

FortiCNAPP
WebLinuxWindows5.5 - 23

Aqua Security
WebLinux5.3 - 24
Check Point WAF (formerly CloudGuard WAF)
Check Point WAF, formerly CloudGuard WAF, protects web and API assets through a hybrid deployment model.
WebAPI5.1 - 25
Tanium Comply
LinuxmacOSWindows5.0 - 264.8
- 274.8
- 28
kube-bench
Linux4.6

