IaC Security

Infrastructure as Code Security

Catch misconfigurations in Terraform, Kubernetes manifests and cloud templates before deploy.

17 tools profiled

How it differs Scans Terraform, Kubernetes manifests and other infrastructure definitions before they are applied. Scanning the built images is container security.

5 tools match

Sort

Active Terraform Clear all

Lacework

Fortinet

IaC Security

A cloud-native application protection platform that baselines normal cloud and workload behavior and flags deviation, now part of Fortinet's FortiCNAPP.

Commercial

Established Compare Lacework
Mondoo

Mondoo

IaC Security

A security and compliance platform built on cnquery, a query language that treats cloud accounts, hosts, containers and IaC as queryable resources.

Open source and commercial

Growing Compare Mondoo
Prisma Cloud

Palo Alto Networks

IaC Security

Palo Alto Networks' cloud-native application protection platform, spanning posture management, workload defense, IaC scanning and code-to-cloud tracing.

Commercial

Established Compare Prisma Cloud
Terrascan

Tenable

IaC Security

A Go-based static analyzer for infrastructure as code that normalizes multiple formats and evaluates them against Rego policies.

Open source

Established Compare Terrascan
Wiz

Wiz

IaC Security

An agentless cloud-native application protection platform that builds a graph of cloud resources, identities and workloads to surface real attack paths.

Commercial

Established Compare Wiz

Lacework

Fortinet

A cloud-native application protection platform that baselines normal cloud and workload behavior and flags deviation, now part of Fortinet's FortiCNAPP.

Commercial Established

IaC Security Compare Lacework
Mondoo

Mondoo

A security and compliance platform built on cnquery, a query language that treats cloud accounts, hosts, containers and IaC as queryable resources.

Open source and commercial Growing

IaC Security Compare Mondoo
Prisma Cloud

Palo Alto Networks

Palo Alto Networks' cloud-native application protection platform, spanning posture management, workload defense, IaC scanning and code-to-cloud tracing.

Commercial Established

IaC Security Compare Prisma Cloud
Terrascan

Tenable

A Go-based static analyzer for infrastructure as code that normalizes multiple formats and evaluates them against Rego policies.

Open source Established

IaC Security Compare Terrascan
Wiz

Wiz

An agentless cloud-native application protection platform that builds a graph of cloud resources, identities and workloads to surface real attack paths.

Commercial Established

IaC Security Compare Wiz

Pick at least one more