awesome-alternatives

compare

Grype vs KICS

The same facts for both, read from GitHub every night, and the relation a person reviewed.

GrypeKICS
LanguageGoOpen Policy Agent
LicenceApache-2.0Apache-2.0
Stars13k2.7k
Latestv0.120.0v2.2.0
Last push2026-10-052026-10-06
Release cadenceabout 16 days between releasesabout 52 days between releases
Active contributors20 commit authors on the default branch in the last 90 days8 commit authors on the default branch in the last 90 days
Flagsnonenone

How they relate

  • Both replace Snyk. Alternatives to Snyk →

    PartialGrypeDependency and container image scanning, from an image, a directory or an SBOM; no code or IaC scanning.

    PartialKICSOnly the infrastructure as code checks, with queries for Terraform, Kubernetes, Docker and more.