Infrastructure as code scanners

Check Terraform, Kubernetes manifests and other infrastructure code for insecure settings before it is applied.

Side by side

Infrastructure as code scanners
Tool	Stars	Licence	Terms	Self-hosted	Language	Latest	Last push
Checkov	9.1k	Apache-2.0	Open source	No	Python	3.3.23	2026-10-06
KICS	2.7k	Apache-2.0	Open source	No	Open Policy Agent	v2.2.0	2026-10-06

2 tools

Checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Language: Python
Licence: Apache-2.0
Stars: 9.1k
Latest: 3.3.23
Last push: 2026-10-06

KICS

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Language: Open Policy Agent
Licence: Apache-2.0
Stars: 2.7k
Latest: v2.2.0
Last push: 2026-10-06

What these tools replace

SnykVulnerability scanners8 →