IaC Security Scanning

CrowdStrike Falcon Cloud Security

One platform to stop the breach, for any cloud.

Extends CrowdStrike's EDR leadership to cloud security.

View tool details →

Wiz

The #1 cloud security platform

A CNAPP that provides full stack visibility and security.

View tool details →

Orca Security

The pioneer of agentless cloud security

Provides comprehensive, agentless security and compliance for the cloud.

View tool details →

Lacework

The data-driven cloud security platform

Automates cloud security and compliance for multicloud environments.

View tool details →

Snyk

AI-powered Developer Security Platform

Finds and fixes vulnerabilities in code, open source, containers, and IaC.

View tool details →

Prisma Cloud by Palo Alto Networks

The most complete Cloud-Native Application Protection Platform (CNAPP)

Secures applications from code to cloud across multicloud environments.

View tool details →

Jit

The M-V-P of DevSecOps.

A DevSecOps platform that simplifies and automates security.

View tool details →

tfsec

Security scanner for your Terraform code.

Open-source static analysis for Terraform.

View tool details →

Trivy

The All-in-One Security Scanner.

Versatile open-source scanner for vulnerabilities, misconfigurations, and more.

View tool details →

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

Open-source, general-purpose policy engine.

View tool details →

Lightspin by Cisco

Contextual Cloud Security.

A CNAPP that prioritizes risks using attack path analysis.

View tool details →

Runecast

Automated Proactive Audits.

Proactive security and compliance analysis for hybrid clouds.

View tool details →

Checkov

Policy-as-code for everyone.

Open-source static analysis for IaC.

View tool details →

KICS by Checkmarx

Keeping Infrastructure as Code Secure.

Open-source IaC security scanning tool.

View tool details →

Datadog Cloud Security Management

Unified security and observability.

Detects threats and misconfigurations across the full cloud stack.

View tool details →

Accurics by Tenable

Policy as Code for the Full Cloud Native Stack.

Provides security and governance from code to cloud.

View tool details →

Aqua Security

The Cloud Native Security Platform.

Secures applications from code to cloud and back.

View tool details →

Terrascan

Detect compliance and security violations across Infrastructure as Code.

Open-source static code analyzer for IaC.

View tool details →

Sysdig Secure

Secure your cloud from source to run.

A CNAPP built on runtime insights from Falco.

View tool details →

Zscaler Posture Control

The Zero Trust Exchange.

Provides unified CNAPP to secure cloud applications.

View tool details →

CloudSploit by Aqua

Cloud Security Auditing and Monitoring.

Open-source and commercial tool for cloud security posture monitoring.

View tool details →

Tenable Cloud Security (incorporating Terrascan)

See everything. Predict what matters. Act to address risk.

Provides unified visibility and security for the entire cloud attack surface.

View tool details →

Regula

Checks infrastructure as code for security and compliance.

An open-source tool that evaluates IaC against policies.

View tool details →

Driftctl

Detect, track and alert on infrastructure drift.

Open-source tool to manage IaC drift.

View tool details →

Horusec

An open source tool that orchestrates other security tools.

Orchestration tool for SAST, SCA, and IaC scanning.

View tool details →

Mondoo

Security and Compliance as Code.

Policy-as-code platform for security and compliance.

View tool details →