IaC Security

Infrastructure as Code Security

Catch misconfigurations in Terraform, Kubernetes manifests and cloud templates before deploy.

17 tools profiled

How it differs Scans Terraform, Kubernetes manifests and other infrastructure definitions before they are applied. Scanning the built images is container security.

4 tools match

Sort

Active Terraform scanning Clear all

Checkov

Prisma Cloud (Palo Alto Networks), originally Bridgecrew

IaC Security

A Python-based static analyzer that parses infrastructure as code into a graph and checks it against built-in and custom misconfiguration policies.

Open source

Established Compare Checkov Verified
KICS

Checkmarx

IaC Security

An open-source scanner from Checkmarx that parses many infrastructure formats into a common model and evaluates Rego queries against it.

Open source

Established Compare KICS Verified
Terrascan

Tenable

IaC Security

A Go-based static analyzer for infrastructure as code that normalizes multiple formats and evaluates them against Rego policies.

Open source

Established Compare Terrascan
tfsec

Aqua Security

IaC Security

A Terraform-specific static analyzer that evaluates HCL against cloud misconfiguration checks, now consolidated into Aqua's Trivy.

Open source

Established Compare tfsec

Checkov

Prisma Cloud (Palo Alto Networks), originally Bridgecrew

A Python-based static analyzer that parses infrastructure as code into a graph and checks it against built-in and custom misconfiguration policies.

Open source Established

IaC Security Compare Checkov
KICS

Checkmarx

An open-source scanner from Checkmarx that parses many infrastructure formats into a common model and evaluates Rego queries against it.

Open source Established

IaC Security Compare KICS
Terrascan

Tenable

A Go-based static analyzer for infrastructure as code that normalizes multiple formats and evaluates them against Rego policies.

Open source Established

IaC Security Compare Terrascan
tfsec

Aqua Security

A Terraform-specific static analyzer that evaluates HCL against cloud misconfiguration checks, now consolidated into Aqua's Trivy.

Open source Established

IaC Security Compare tfsec

Pick at least one more