cfn-nag
6.1#14 in infrastructure testing toolsFree planFree planLinuxmacOSSelf-hosted
Visitcfn-nag vs Chef InSpec
Chef InSpec
8.0#1 in infrastructure testing toolsFrom $59 a yearFree planAPILinuxmacOSSelf-hosted
VisitWhat both publish
| Fact | cfn-nag | Chef InSpec |
|---|---|---|
| Integrations | The project documents running cfn-nag in GitHub Actions workflows and deploying it in AWS CodePipeline through the AWS Serverless Application Repository. | The kitchen-inspec verifier lets users run InSpec profiles through Test Kitchen. |
| Purpose | cfn-nag scans CloudFormation templates for patterns that may indicate insecure infrastructure. | Chef InSpec tests and audits applications and infrastructure by comparing their actual state with a desired state expressed in InSpec code. |
| Support | The project directs users to submit bug reports and feature requests through its GitHub issue tracker. | The licensing page lists community Slack support for Free and Trial tiers and contract support for Commercial licenses. |
cfn-nag plans
- cfn-nagFree
Chef InSpec plans
- FreeFree
- TrialFree
- Business$59 a year
- Enterprise$189 a year
- CommercialPriced on request
- Enterprise PlusPriced on request
Pick cfn-nag if…
It suits teams checking AWS CloudFormation templates for security-related patterns in local or pipeline workflows. Users who need custom checks can add rules, while those analyzing deployment parameters need to supply them separately.
Pick Chef InSpec if…
It suits teams that need to express compliance or security requirements as code and assess cloud or other infrastructure. The free plan is limited to non-production, personal, non-commercial use.