Best Cloud Vulnerability Scanners in 2026
Updated
In short: Intruder is ranked #1 of 24 as of 4 October 2026, ahead of Mondoo CSPM and Trivy. The best-ranked option with a free plan is Mondoo CSPM. The lowest first paid tier on this page is Alibaba Cloud Security Center at $1/mo.
Assessing cloud risk means considering both where a scanner can look and what kinds of issues it can surface. Compare cloud platform coverage and deployment model with workload and IaC scanning, then review identity analysis and attack path analysis. Free-plan availability and paid-from pricing add further comparison points. Intruder, Mondoo CSPM, and Kubescape begin the ranking, followed by Prowler Cloud, AccuKnox, and RapidFort. Cy5 Cloud-Native Vulnerability Management and Qualys TotalCloud are also among the first entries. Use these criteria to consider which scanning scope and deployment approach suit the cloud environments you need to assess.
24 cloud vulnerability scanners ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
#1 Intruder Top pick · 7.2 Free plan · Free
#2 Mondoo CSPM Runner-up · 7.2 Free plan · Free
#3 Trivy Also great · 7.2 Free plan · Free
- Free planFree trial apiLinuxmacOSWebWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free plan apiLinuxmacOSWebWindows
- Free plan
- Yes
- IaC scanning
- Yes
RecognisedDocumentedFree planPlatforms - Free plan LinuxmacOSself-hostedWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free plan apiLinuxmacOSself-hostedWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free plan LinuxmacOSself-hostedWindows
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial apiLinuxself-hostedWeb
- Free plan
- No
- IaC scanning
- Yes
RecognisedDocumentedFree planPlatforms$99/mofirst paid tier About Prowler CloudVisit site - Free plan Linuxself-hostedWeb
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial Web
- Cloud platforms
- AWS, Azure, GCP
- Workload scanning
- Yes
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatforms - Free planFree trial apiWeb
- Free plan
- No
- Cloud platforms
- AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure
RecognisedDocumentedFree planPlatforms - Free plan self-hostedWeb
- Free plan
- Yes
- Cloud platforms
- AWS
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatforms - Linuxself-hostedWeb
- Free plan
- Yes
- Cloud platforms
- AWS; Azure; GCP; Oracle; OpenStack; OpenShift; Nutanix; VMware; IBM Cloud; DigitalOcean; Alibaba Cloud
RecognisedDocumentedFree planPlatforms - Free trial apiWeb
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms$58.25/mofirst paid tier About Astra SecurityVisit site - apiLinuxmacOSWeb
- Free plan
- No
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
- Cloud platforms
- Alibaba Cloud, AWS, Azure, Huawei Cloud, Tencent Cloud, Volcano Engine
- Workload scanning
- Yes
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatforms$1/mofirst paid tier About Alibaba Cloud Security CenterVisit site - self-hostedRecognisedDocumentedFree planPlatforms
- Free trial apiWeb
- Free plan
- No
- IaC scanning
- Yes
RecognisedDocumentedFree planPlatforms$850/mofirst paid tier About Cyscale CSPMVisit site - Web
- IaC scanning
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
- Cloud platforms
- Tencent Cloud and other cloud platforms
- Workload scanning
- Yes
- IaC scanning
- Yes
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatformsCNY 21/mofirst paid tier About Tencent Cloud CDNVisit site - LinuxRecognisedDocumentedFree planPlatforms
- Web
- Free plan
- Yes
- Cloud platforms
- Tencent Cloud and other cloud platforms
- Workload scanning
- Yes
- IaC scanning
- Yes
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Cloud platforms
- AWS, Microsoft Azure, Microsoft 365, Google Cloud, Oracle Cloud
- Identity analysis
- Yes
RecognisedDocumentedFree planPlatforms - WebLinux
- Free plan
- No
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- Yes
RecognisedDocumentedFree planPlatforms - Web
- Free plan
- No
RecognisedDocumentedFree planPlatforms
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which cloud vulnerability scanner is ranked first on Everything Xiaomi?
Intruder is ranked #1 of 24 with a score of 7.2. Mondoo CSPM is second and Trivy third.
How many of these have a free plan?
10 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Alibaba Cloud Security Center has the lowest first paid tier we found: $1/mo.
How is this list ranked?
Ranked on what each maker publishes: documentation depth, a free tier and the platforms it runs on. Paid placements never change a rank.