AppSecNews

IaC Security

Infrastructure as Code Security

Catch misconfigurations in Terraform, Kubernetes manifests and cloud templates before deploy.

17 tools profiled

How it differs Scans Terraform, Kubernetes manifests and other infrastructure definitions before they are applied. Scanning the built images is container security.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

7 tools match

Active Agent Clear all

  • Falco

    The Falco Project (CNCF)

    IaC Security

    A CNCF runtime security engine that taps Linux kernel syscalls with eBPF and raises alerts when activity matches a rule.

    Open source
    Established

  • KubeArmor

    AccuKnox (CNCF project)

    IaC Security

    A CNCF runtime security engine that uses Linux security modules and eBPF to block, not just alert on, disallowed behavior inside workloads.

    Open source
    Growing

  • Lacework

    Fortinet

    IaC Security

    A cloud-native application protection platform that baselines normal cloud and workload behavior and flags deviation, now part of Fortinet's FortiCNAPP.

    Commercial
    Established

  • Mondoo

    Mondoo

    IaC Security

    A security and compliance platform built on cnquery, a query language that treats cloud accounts, hosts, containers and IaC as queryable resources.

    Open source and commercial
    Growing

  • Falco

    The Falco Project (CNCF)

    A CNCF runtime security engine that taps Linux kernel syscalls with eBPF and raises alerts when activity matches a rule.

    Open source Established
    IaC Security

  • KubeArmor

    AccuKnox (CNCF project)

    A CNCF runtime security engine that uses Linux security modules and eBPF to block, not just alert on, disallowed behavior inside workloads.

    Open source Growing
    IaC Security

  • Lacework

    Fortinet

    A cloud-native application protection platform that baselines normal cloud and workload behavior and flags deviation, now part of Fortinet's FortiCNAPP.

    Commercial Established
    IaC Security

  • Mondoo

    Mondoo

    A security and compliance platform built on cnquery, a query language that treats cloud accounts, hosts, containers and IaC as queryable resources.

    Open source and commercial Growing
    IaC Security

  • Prisma Cloud

    Palo Alto Networks

    IaC Security

    Palo Alto Networks' cloud-native application protection platform, spanning posture management, workload defense, IaC scanning and code-to-cloud tracing.

    Commercial
    Established

  • Sysdig Secure

    Sysdig

    IaC Security

    A commercial cloud and container security platform built on Falco, combining runtime detection with posture, vulnerability management and capture-based forensics.

    Commercial
    Established

  • Wiz

    Wiz

    IaC Security

    An agentless cloud-native application protection platform that builds a graph of cloud resources, identities and workloads to surface real attack paths.

    Commercial
    Established

  • Prisma Cloud

    Palo Alto Networks

    Palo Alto Networks' cloud-native application protection platform, spanning posture management, workload defense, IaC scanning and code-to-cloud tracing.

    Commercial Established
    IaC Security

  • Sysdig Secure

    Sysdig

    A commercial cloud and container security platform built on Falco, combining runtime detection with posture, vulnerability management and capture-based forensics.

    Commercial Established
    IaC Security

  • Wiz

    Wiz

    An agentless cloud-native application protection platform that builds a graph of cloud resources, identities and workloads to surface real attack paths.

    Commercial Established
    IaC Security
Tick up to 4 tools above.