Open source
Open Policy Agent
General-purpose policy engine that decouples policy from code
Cloud SecurityPolicy as code engine
Alternatives to Kyverno
12 tools like Kyverno, chosen by what they do. About Kyverno
Open source
Open source
Kubescape
Open source Kubernetes security scanner and policy checker
Cloud SecurityKubernetes security posture
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Curated
Wiz
Cloud and AI security platform linking code, cloud and runtime
Cloud SecurityCloud security platform
Open source
Sigstore
Open source tools for signing and verifying software artifacts
Cloud SecuritySign and verify software
Open source
Cloud Custodian
Rules engine to find, tag and act on cloud resources
Cost ManagementCloud governance rules engine
Open source
Trivy
Open source scanner for vulnerabilities and misconfigurations
Code SecurityOpen vulnerability scanner
Open source
OWASP Cheat Sheet Series
Short security guides for developers, one topic per sheet
Security LearningConcise security cheat sheets
Open source
Crossplane
Open source framework to build platform APIs on top of Kubernetes
Kubernetes ToolsControl planes for cloud
Open source
Pomerium
Identity-aware access proxy for private apps, SSH and Kubernetes
Network DefenseIdentity aware access proxy
Open source
CodeQL
Code analysis engine that runs security queries across a codebase
Code SecuritySemantic code analysis engine