Open source
Kubescape
Open source Kubernetes security scanner and policy checker
Cloud SecurityKubernetes security posture
Alternatives to Wiz
12 tools like Wiz, chosen by what they do. About Wiz
Open source
Open Policy Agent
General-purpose policy engine that decouples policy from code
Cloud SecurityPolicy as code engine
Open source
Open source
Grype
Open source CLI that finds known vulnerabilities in container images
Cloud SecurityFast vulnerability scanner
Open source
Open source
Sigstore
Open source tools for signing and verifying software artifacts
Cloud SecuritySign and verify software
Curated
Checkmarx
Enterprise platform that scans code for security flaws and risks
Code SecurityEnterprise code security
Freemium
Aikido
Security platform for code, dependencies, cloud and pentests
Code SecurityAll in one security for devs
Curated
Veracode
Platform for finding and fixing application security risks
Code SecurityApplication security platform
Freemium
SonarQube
Checks code quality and security in every change, human or AI
Code SecurityCode quality and security
Open source
Semgrep
Scans source code and dependencies for security issues
Code SecurityFast code security scanning
Open source
OSV-Scanner
Finds known vulnerabilities in your project's dependencies
Code SecurityGoogle open source scanner