Winfunc Infrastructure Scanner
Winfunc Infrastructure Scanner analyzes infrastructure-as-code, cloud configurations, and container definitions before production.
What Winfunc Infrastructure Scanner is
Winfunc Infrastructure Scanner analyzes infrastructure-as-code, cloud configurations, and container definitions before production. It supports Terraform, CloudFormation, Pulumi, Kubernetes manifests, and Dockerfiles. Cloud checks review IAM policies, network exposure, storage settings, and drift between declared infrastructure and actual cloud state. The scanner maps CIS Benchmark requirements for AWS, GCP, and Azure through provider APIs. Dockerfile and image analysis identifies known CVEs, permission problems, and insecure base images, with CI pre-deploy gates. Findings receive severity and business context, suggested fixes, and generated IaC patches. Reports map issues to CIS, SOC 2, ISO 27001, PCI DSS, and HIPAA, including evidence and remediation guidance. Integrations include code hosts, CI systems, Jira, Slack, Microsoft Teams, and listed developer assistants. Deployment can be self-hosted on premises or in a private cloud. One-time scans cost $500, paid once; other plans use credits or custom terms.
Good
- Terraform, Kubernetes, and CloudFormation analysis
- Detects exposed secrets and configuration drift
- Container CVE and permission scanning
- Compliance reports include evidence
- Self-hosted deployment keeps data within perimeter
Watch out
- No free plan
- One-time scan costs $500, paid once
- Deep scans are priced by scope
- Some plans require a pricing call
Who it suits
It suits teams managing cloud infrastructure, containers, and compliance requirements. Regulated organizations can choose enterprise terms with customer-controlled hosting and named support.
Verdict
Winfunc combines infrastructure, cloud, container, and compliance checks in one scanner. Its self-hosted option and enterprise controls fit organizations with strict data and policy requirements.
Plans and prices
From Winfunc Infrastructure Scanner's own pricing page, checked 7 Oct 2001.
| Plan | Price | What it gives you |
|---|---|---|
| One-time | $500, paid once | one surface or deep scan · findings workspace and report · no subscription · per surface scan; deep scan priced by scope |
| Pay as you go | Priced on request | full credit-based workflow · no commitment · credits bought as needed; estimated before every scan |
| Recurring | — | allowance renews each month · exact allowance and discount confirmed on pricing call · monthly credit allowance; annual billing at a discount |
| Enterprise | Priced on request | customer-controlled hosting · isolated tenants · bring your own model keys · organization-wide policies · named support · custom committed usage; terms set in your agreement |
The facts
Each one read from Winfunc Infrastructure Scanner's own pages, with the date it was checked.
What it does
- Cloud analysis
- Reviews cloud IAM policies, detects network exposure and storage misconfigurations, and checks for drift between declared infrastructure and actual cloud state.checked 7 Oct 2001
- Cloud providers
- Maps CIS Benchmark compliance for AWS, GCP, and Azure and uses cloud provider APIs for real-time posture assessment.checked 7 Oct 2001
- Code retention
- The Trust Center says source code is processed in memory and discarded after analysis, retaining only finding metadata.checked 7 Oct 2001
- Compliance frameworks
- Maps findings to CIS, SOC 2, ISO 27001, PCI DSS, and HIPAA and offers audit-ready reports with evidence and remediation guidance.checked 7 Oct 2001
- Containers
- Scans Dockerfiles and container images for known CVEs, misconfigured permissions, and insecure base images, with CI pre-deploy gates.checked 7 Oct 2001
- Deployment
- The Trust Center describes self-hosted deployment on premises or in a private cloud, with data remaining within the customer’s perimeter.checked 7 Oct 2001
- Integrations
- The integrations page lists GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Actions, Jenkins, CircleCI, Jira, Slack, Microsoft Teams, Cursor, Claude Desktop, Windsurf, and Cline.checked 7 Oct 2001
- Intended users
- The product page describes continuous cloud posture assessment and policy enforcement, while pricing offers Enterprise terms for regulated teams.checked 7 Oct 2001
- Purpose
- Scans infrastructure-as-code, cloud configurations, and container definitions for misconfigurations, exposed secrets, and compliance violations before production.checked 7 Oct 2001
- Remediation
- Prioritizes findings by severity with business context and suggests fixes with IaC patch generation.checked 7 Oct 2001
- Security
- The Trust Center says Winfunc is SOC 2 Type II certified and ISO 27001 is in progress.checked 7 Oct 2001
- Support
- The Trust Center says Enterprise includes a dedicated security engineer, priority Slack channel, response times under one hour for critical issues, and quarterly security reviews.checked 7 Oct 2001
- Supported formats
- Supports Terraform, CloudFormation, Pulumi, Kubernetes manifests, and Dockerfiles.checked 7 Oct 2001
Alternatives to Winfunc Infrastructure Scanner
- 1
Aikido CSPM
Free planWebAPILinuxmacOS7.9From $300 a month - 2
Kyverno
Free planOpen sourceWebAPILinuxmacOS7.7Free plan - 3
Fairwinds Polaris
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 4
KloudSec IaC Security
Free planWebAPILinuxmacOS7.0From $79 a month - 5
kube-score
Free planWebLinuxmacOSSelf-hosted6.9Free plan - 6
Trivy
Free planLinuxmacOSSelf-hostedWindows6.9Free plan