18.2
Kubescape is an open-source Kubernetes security platform for coverage across configuration, vulnerabilities, compliance, and runtime activity.
Free planOpen sourceAPILinuxmacOS
Best IaC Security Scanners in 2026
28.0
DeepSource is an AI code review platform for teams writing code with AI.
Free planWebAPILinux
37.4
Pulumi helps engineers define and manage infrastructure with Infrastructure as Code using general-purpose languages.
Free planWebAPILinux
- 4
Fairwinds Polaris
Fairwinds Polaris is an open source policy engine that validates and can remediate Kubernetes resource configuration.
Free planWebLinuxmacOSSelf-hosted7.1Free plan - 5
kube-score
kube-score statically analyzes Kubernetes object definitions and recommends changes intended to improve application security and resilience.
Free planWebLinuxmacOSSelf-hosted7.0Free plan - 6
Trivy
Trivy is a free, Apache-2.0-licensed scanner for code repositories, binary artifacts, container images, and Kubernetes clusters.
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 7
Checkov
Checkov is a free infrastructure-as-code scanner that identifies misconfigurations that may create security or compliance problems.
Free planLinuxmacOS6.2Free plan - 8
KubeLinter
KubeLinter is a free, open-source tool for statically checking Kubernetes YAML files, Helm charts and Kustomize manifests for production-readiness and security practices.
Free planLinuxmacOSSelf-hosted6.2Free plan - 9
TFLint
TFLint is a free, pluggable command-line linter for Terraform that checks configurations for possible errors and rule violations.
Free planLinuxmacOSSelf-hostedWindows6.2Free plan - 10
cfn-nag
cfn-nag is a free static analysis tool that scans CloudFormation templates for patterns that may indicate insecure infrastructure.
Free planLinuxmacOSSelf-hosted6.1Free plan - 11
terraform-compliance
terraform-compliance is a free, open-source framework for testing Terraform infrastructure code against security and compliance policies before deployment.
Free planLinuxSelf-hosted5.9Free plan - 12
AWS CloudFormation Guard
LinuxmacOSWindows4.8 - 134.8
- 14
Snyk IaC
Web4.8 - 15
AWS CDK Nag
LinuxmacOSWindows4.7 - 16
PSRule for Azure
LinuxmacOSWindows4.7