CFRipper
7.5#5 in infrastructure as code security softwareFree planFree planWebLinuxmacOSSelf-hosted
VisitCFRipper vs Kubescape
What both publish
| Fact | CFRipper | Kubescape |
|---|---|---|
| Documentation | The README links to a dedicated Read the Docs documentation site. | The documentation covers installation, scanning, frameworks, controls, operator services, integrations, runtime detection, telemetry and troubleshooting. |
| License | The package and repository use the OSI-approved Apache License 2.0. | Kubescape is released under the Apache 2.0 license. |
| Purpose | CFRipper is a library and CLI security analyzer for AWS CloudFormation templates that aims to prevent vulnerable infrastructure from reaching production. | Kubescape is an open-source Kubernetes security platform for end-to-end security coverage. |
CFRipper plans
- CFRipperFree
- FreeFree
Kubescape plans
- ARMO Platform FreeFree
- Kubescape Open SourceFree
- ARMO Platform Startup$30 a month
- ARMO PlatformPriced on request
- ARMO Platform EnterprisePriced on request
Pick CFRipper if…
CFRipper suits teams analyzing AWS CloudFormation templates that want a CLI tool with configurable rules and custom checks. It is not suited to infrastructure defined in Terraform or Kubernetes, based on its listed analysis scope.
Pick Kubescape if…
Kubescape suits teams securing Kubernetes deployments that need checks across configuration, image vulnerabilities, compliance, and runtime activity. It is also suited to teams that want a self-hosted, open-source CLI and operator, or need offline and air-gapped scanning.