Skip to content
SPECIFICTION
Get listed

IaC Security Scanners

Alternatives to AWS CDK Nag

The tools Specifiction weighs against AWS CDK Nag, from its list of iac security scanners, each with its plans, platforms and spec score.

  1. 01 DeepSource

    DeepSource suits software teams that want automated pull-request checks, security scanning, and code coverage controls.

    From $2/mo Free plan Web · Windows · macOS · Linux
    9.3 Visit Specs
  2. 02 Kubescape

    Kubescape suits teams managing Kubernetes clusters that want configuration, image, compliance, and runtime security checks.

    From $30/mo Free plan Open source Windows · macOS · Linux · API
    9.1 Visit Specs
  3. 03 Fairwinds Polaris

    Polaris suits Kubernetes teams seeking to validate configuration practices and address supported problems automatically.

    Free plan Web · Windows · macOS · Linux
    8.8 Visit Specs
  4. 04 kube-score

    kube-score suits teams reviewing Kubernetes definitions for security and resilience concerns, especially those using Helm, Kustomize, or CI/CD.

    Free plan Web · Windows · macOS · Linux
    8.3 Visit Specs
  5. 05 Pulumi

    Pulumi suits engineers defining infrastructure in general-purpose languages across supported cloud providers.

    From $40/mo Free plan Web · Windows · macOS · Linux
    8.2 Visit Specs
  6. 06 Trivy

    It suits teams or developers scanning repositories, artifacts, container images, or Kubernetes environments for security issues.

    Free plan Windows · macOS · Linux · Self-hosted
    8.1 Visit Specs
  7. 07 cfn-nag

    cfn-nag suits teams reviewing CloudFormation security on Linux, macOS, or self-hosted systems.

    Free plan macOS · Linux · Self-hosted
    8.0 Visit Specs
  8. 08 Checkov

    Checkov suits developers and teams scanning infrastructure-as-code for configuration risks, credentials, or compliance checks.

    Free plan macOS · Linux
    7.9 Visit Specs
  9. 09 KubeLinter

    It suits teams reviewing Kubernetes manifests for security and production practices, including automated workflows.

    Free plan macOS · Linux · Self-hosted
    7.8 Visit Specs
  10. 10 TFLint

    TFLint suits Terraform users who want local checks for language issues, cloud-specific configuration errors, or naming and best-practice rules.

    Free plan Windows · macOS · Linux · Self-hosted
    7.3 Visit Specs
  11. 11 terraform-compliance

    terraform-compliance suits developers and security teams who need readable Terraform policy checks before deployment.

    Free plan Linux · Self-hosted
    7.2 Visit Specs
  12. 12 AWS CloudFormation Guard
    Windows · macOS · Linux
    6.2 Visit Specs
  13. 13 PSRule for Azure
    Windows · macOS · Linux
    5.7 Visit Specs
  14. 14 Safeguard IaC Security
    Web
    5.5 Visit Specs
  15. 15 Snyk IaC
    Web
    5.4 Visit Specs

AWS CDK Nag, head to head