Open source
Open Policy Agent
General-purpose policy engine that decouples policy from code
Cloud SecurityPolicy as code engine
Alternatives to Checkov
12 tools like Checkov, chosen by what they do. About Checkov
Open source
Open source
Kubescape
Open source Kubernetes security scanner and policy checker
Cloud SecurityKubernetes security posture
Curated
Wiz
Cloud and AI security platform linking code, cloud and runtime
Cloud SecurityCloud security platform
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Open source
Sigstore
Open source tools for signing and verifying software artifacts
Cloud SecuritySign and verify software
Open source
Nuclei
Open source scanner that runs vulnerability checks from templates
Web ScanningTemplate based vuln scanner
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Freemium
Aikido
Security platform for code, dependencies, cloud and pentests
Code SecurityAll in one security for devs
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner
Curated
StackHawk
Security testing for running apps, with fixes from coding agents
Web ScanningDeveloper first DAST