17.7
Mondoo CSPM scans cloud environments to identify misconfigurations and prioritize them by exploitability and business exposure.
Free planOpen sourceWebAPIExtension
Alternatives to Wiz Code
27.4
Grype is a free, Apache-2.0-licensed vulnerability scanner for container images, filesystems, SBOMs, and individual packages.
Free planOpen sourceLinuxmacOSSelf-hosted
37.2
Sysdig Secure is a cloud-native application protection platform for cloud environments, containers, Kubernetes, hosts, and serverless workloads.
WebAPILinux
- 4
Alibaba Cloud Container Registry
Free planWebAPILinuxWindows7.1Free plan - 5
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 6
ZeroPath
ZeroPath is an application security platform for finding and fixing exploitable vulnerabilities across code, cloud, and runtime.
WebAPILinuxmacOS6.5From $1,000 a month - 7
RapidFort
RapidFort is a software supply chain security platform for containerized applications, combining vulnerability analysis, runtime visibility, hardened…
Free planWebLinuxSelf-hosted6.4Free plan - 8
Anchore Enterprise
WebAPILinuxSelf-hosted6.2 - 9
Google Artifact Analysis
Google Artifact Analysis provides software composition analysis and stores and retrieves metadata.
WebAPILinuxmacOS6.2$0.26 one-time - 10
Harbor
Harbor is a free, open source registry for securely managing artifacts across cloud native platforms such as Kubernetes and Docker.
Free planWebAPILinuxSelf-hosted6.1Free plan - 11
Mirantis Secure Registry
WebAPILinuxSelf-hosted6.1From $9,999 a year - 12
Uptycs Container Security
Uptycs Container Security provides security controls for containers and Kubernetes across development, deployment, and runtime.
WebAPILinuxSelf-hosted6.0From $36 a year - 13
Aqua Container Security
Aqua Container Security protects container applications from image creation through runtime across platforms and clouds.
WebLinuxSelf-hostedWindows5.9 - 14
Clair
Clair is a free, open-source project for finding vulnerabilities in application container images, including OCI and Docker images.
Free planAPILinuxSelf-hosted5.9Free plan - 15
Amazon Inspector
Amazon Inspector is a cloud security service that automatically discovers workloads and code repositories, then scans them for software…
WebAPI5.8 - 16
5.6Free plan - 17
Dagda
Dagda is a free, self-hosted Docker security tool for examining images and containers for vulnerabilities, malware, and other threats, while…
APILinuxSelf-hosted5.5 - 18
Docker Scout
Docker Scout is a software-as-a-service tool for scanning Docker images and registries and generating software bills of materials (SBOMs).
WebLinuxmacOSWindows5.5 - 19
FortiCNAPP
WebLinuxWindows5.5 - 20
CrowdStrike Falcon Cloud Security
WebLinuxmacOSWindows5.4 - 21
O3 Security Image Scanner
O3 Security Image Scanner checks container images for operating-system vulnerabilities, malicious layers, embedded secrets, and permission…
Web5.3 - 22
Sonatype Container Scanner
APILinuxSelf-hostedWindows5.3 - 235.1
- 24
SUSE NeuVector
SUSE NeuVector is a free, open-source Kubernetes security product designed for self-hosted deployment.
Web5.0 - 254.9
- 26
Qualys Container Security
WebLinux4.8 - 274.6
- 284.6