Infrastructure as code scanners

Check Terraform, Kubernetes manifests and other infrastructure code for insecure settings before it is applied.

Im Vergleich

Infrastructure as code scanners
Tool	Sterne	Lizenz	Bedingungen	Selbst hostbar	Sprache	Neuestes Release	Letzter Push
Checkov	9.1k	Apache-2.0	Open Source	Nein	Python	3.3.23	2026-10-06
KICS	2.7k	Apache-2.0	Open Source	Nein	Open Policy Agent	v2.2.0	2026-10-06

2 Tools

Checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Sprache: Python
Lizenz: Apache-2.0
Sterne: 9.1k
Neuestes Release: 3.3.23
Letzter Push: 2026-10-06

KICS

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

Sprache: Open Policy Agent
Lizenz: Apache-2.0
Sterne: 2.7k
Neuestes Release: v2.2.0
Letzter Push: 2026-10-06

Was diese Tools ersetzen

SnykVulnerability scanners8 →