Best Cloud Vulnerability Scanners in 2026
Updated
In short: Intruder is ranked #1 of 24 as of 4 October 2026, ahead of Mondoo CSPM and Prowler Cloud. The best-ranked option with a free plan is Mondoo CSPM. The lowest first paid tier on this page is Alibaba Cloud Security Center at $1/mo.
Cloud vulnerability scanning can cover different platforms, deployment approaches, and parts of your environment. Compare cloud platforms and deployment model, then weigh attack path analysis and identity analysis alongside IaC and workload scanning. These dimensions help you assess which areas each entry addresses for your setup. Intruder, Mondoo CSPM, and Prowler Cloud are among the options to consider. Free-plan availability and paid-from pricing add cost context as you compare the listed scanning coverage with the environments and workloads you need to examine.
24 cloud vulnerability scanners ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
24ranked
10free plans on this page
$1/molowest paid tier
4 Oct 2026last checked
Input list Cloud Vulnerability Scanners 24 channels on this page · 66 of 192 spec lines stated by the makers
Ch Tool Free planPaid fromCloud platformsWorkload scanningIaC scanningIdentity analysisAttack path analysisDeployment model Spec sheet Score
01 Intruder Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelhybrid 2/8spec lines stated 7.7
02 Mondoo CSPM Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningYesIdentity analysisnot statedAttack path analysisYesDeployment modelnot stated 3/8spec lines stated 7.4
03 Prowler Cloud Free planNoPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningYesIdentity analysisnot statedAttack path analysisYesDeployment modelnot stated 3/8spec lines stated 7.4
04 Cy5 Cloud-Native Vulnerability Management Free plannot statedPaid fromnot statedCloud platformsAWS, Azure, GCPWorkload scanningYesIaC scanningnot statedIdentity analysisYesAttack path analysisYesDeployment modelsaas 5/8spec lines stated 7.3
05 Trivy Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 1/8spec lines stated 7.3
06 Kubescape Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelself hosted 2/8spec lines stated 7.2
07 Qualys TotalCloud Free planNoPaid fromnot statedCloud platformsAWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud InfrastructureWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelhybrid 3/8spec lines stated 7.2
08 Grype Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 1/8spec lines stated 7.1
09 RapidFort Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelhybrid 2/8spec lines stated 7.1
10 Astra Security Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 1/8spec lines stated 6.9
11 ZeusCloud Free planYesPaid fromnot statedCloud platformsAWSWorkload scanningnot statedIaC scanningnot statedIdentity analysisYesAttack path analysisYesDeployment modelhybrid 5/8spec lines stated 6.9
12 Cyscale CSPM Free planNoPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningYesIdentity analysisnot statedAttack path analysisYesDeployment modelnot stated 3/8spec lines stated 6.7
13 AccuKnox Free planYesPaid fromnot statedCloud platformsAWS; Azure; GCP; Oracle; OpenStack; OpenShift; Nutanix; VMware; IBM Cloud; DigitalOcean; Alibaba CloudWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelhybrid 3/8spec lines stated 6.6
14 Google Artifact Analysis Free planNoPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelsaas 2/8spec lines stated 6.6
15 Alibaba Cloud Security Center Free planYesPaid fromnot statedCloud platformsAlibaba Cloud, AWS, Azure, Huawei Cloud, Tencent Cloud, Volcano EngineWorkload scanningYesIaC scanningnot statedIdentity analysisYesAttack path analysisYesDeployment modelsaas 6/8spec lines stated 6.4
16 OpenCNAPP Free plannot statedPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 0/8spec lines stated 6.4
17 Tencent Cloud CDN Free planYesPaid fromnot statedCloud platformsTencent Cloud and other cloud platformsWorkload scanningYesIaC scanningYesIdentity analysisYesAttack path analysisYesDeployment modelsaas 7/8spec lines stated 6.3
18 Tenable One Cloud Security Free plannot statedPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningYesIdentity analysisnot statedAttack path analysisYesDeployment modelnot stated 2/8spec lines stated 6.1
19 SUSE Multi-Linux Manager Free plannot statedPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelself hosted 1/8spec lines stated 6.0
20 Holm Security Cloud Security Free plannot statedPaid fromnot statedCloud platformsAWS, Microsoft Azure, Microsoft 365, Google Cloud, Oracle CloudWorkload scanningnot statedIaC scanningnot statedIdentity analysisYesAttack path analysisnot statedDeployment modelsaas 3/8spec lines stated 5.9
21 Tencent Cloud Security Center Free planYesPaid fromnot statedCloud platformsTencent Cloud and other cloud platformsWorkload scanningYesIaC scanningYesIdentity analysisYesAttack path analysisYesDeployment modelsaas 7/8spec lines stated 5.9
22 Anchore Enterprise Free planNoPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 1/8spec lines stated 5.6
23 Onam Security API Security Free planYesPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelhybrid 2/8spec lines stated 5.4
24 Amazon Inspector Free planNoPaid fromnot statedCloud platformsnot statedWorkload scanningnot statedIaC scanningnot statedIdentity analysisnot statedAttack path analysisnot statedDeployment modelnot stated 1/8spec lines stated 5.0
Is your tool on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which cloud vulnerability scanner is ranked first on Specifiction?
Intruder is ranked #1 of 24 with a score of 7.7. Mondoo CSPM is second and Prowler Cloud third.
How many of these have a free plan?
10 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Alibaba Cloud Security Center has the lowest first paid tier we found: $1/mo.
How is this list ranked?
Ranked on what each maker publishes, the fullest spec sheet first: how deeply the product is documented, the platforms it runs on, a free tier or trial to test it, and its standing. Paid placements never change a rank.
More in IT & Infrastructure
All IT & infrastructure listsIT Asset Management Software 109Residential Proxy Services 73IT Automation Software 70IT Knowledge Base Software 61Website Monitoring Software 55IT SLA Management Software 50IT Help Desk Software 48Patch Management Software 46Identity and Access Management Software 43IT Change Management Software 43Application Deployment Software 42IT Problem Management Software 41