AppSecNews

IaC Security

Infrastructure as Code Security

Catch misconfigurations in Terraform, Kubernetes manifests and cloud templates before deploy.

17 tools profiled

How it differs Scans Terraform, Kubernetes manifests and other infrastructure definitions before they are applied. Scanning the built images is container security.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Cloudformation Scanning Clear all

  • Checkov

    Prisma Cloud (Palo Alto Networks), originally Bridgecrew

    IaC Security

    A Python-based static analyzer that parses infrastructure as code into a graph and checks it against built-in and custom misconfiguration policies.

    Open source
    Established Verified

  • KICS

    Checkmarx

    IaC Security

    An open-source scanner from Checkmarx that parses many infrastructure formats into a common model and evaluates Rego queries against it.

    Open source
    Established Verified

  • Checkov

    Prisma Cloud (Palo Alto Networks), originally Bridgecrew

    A Python-based static analyzer that parses infrastructure as code into a graph and checks it against built-in and custom misconfiguration policies.

    Open source Established
    IaC Security

  • KICS

    Checkmarx

    An open-source scanner from Checkmarx that parses many infrastructure formats into a common model and evaluates Rego queries against it.

    Open source Established
    IaC Security
Tick up to 4 tools above.