cfn-nag vs Serverspec
| cfn-nag | Serverspec | |
|---|---|---|
| Free plan | Yes | No |
| Free trial | No | No |
| Paid from | Free | — |
| Open source | No | No |
| Platforms | Linux, macOS, self-hosted | Linux, Windows |
| Free plan | Yes | — |
| IaC support | — | CFEngine, Puppet, Chef, Ansible, Itamae |
| Config compliance | — | Yes |
| Provisioning tests | — | No |
| Deployed checks | — | Yes |
| Policy as code | — | Yes |
| Execution model | — | local |
Both are listed in Best Infrastructure Testing Tools. On Everything Xiaomi, cfn-nag scores higher on our published basis.