Tech riderRev. 30 Sept 2026
Deepfence ThreatMapper
- 1Runs onAPI, Linux, self-hosted, Web, Windows
- 2CostsFree plan
- 3Image scanningYes
- 4Runtime protectionYes
- 5Kubernetes securityYes
- 6Registry scanningYes
- 7SBOM generationYes
- 8Deployment modelself hosted
8 lines stated Written from the maker's own pages: threatmapper.org
Overview
Deepfence ThreatMapper is ranked #5 of 24 in container security software on Specifiction. It runs on API, Linux, Self-hosted, Web, Windows. There is a free plan.
Deepfence ThreatMapper plans and pricing
All plansCompared on container security software
- Free plan
- Yesthreatmapper.org
- Image scanning
- Yesthreatmapper.org
- Runtime protection
- Yesthreatmapper.org
- Kubernetes security
- Yesthreatmapper.org
- Registry scanning
- Yesthreatmapper.org
- SBOM generation
- Yesthreatmapper.org
- Deployment model
- self_hostedthreatmapper.org
Facts
- Purpose
- ThreatMapper hunts for hidden threats in production platforms and ranks them by risk of exploit.threatmapper.org · 30 Sept 2026
- Workload discovery
- It scans platforms to identify pods, containers, applications and infrastructure and maps their topology and attack surface.threatmapper.org · 30 Sept 2026
- SBOM vulnerability scanning
- It generates runtime SBOMs for running pods, containers, serverless apps, applications and operating systems and matches them against multiple vulnerability feeds.threatmapper.org · 30 Sept 2026
- Secret detection
- It detects exposed keys, tokens and passwords in containers and host filesystems.threatmapper.org · 30 Sept 2026
- Compliance
- It evaluates infrastructure configuration against CIS, PCI-DSS, HIPAA and other compliance benchmarks.threatmapper.org · 30 Sept 2026
- Threat Graph
- The Threat Graph correlates vulnerabilities, secrets and compliance issues with live and recent network flows, security groups and live status.threatmapper.org · 30 Sept 2026
- Management console
- The standalone management console runs as containers on a Docker host or dedicated Kubernetes cluster and exposes HTTPS administration and API automation.threatmapper.org · 30 Sept 2026
- Integrations
- Documented integrations include Slack, PagerDuty, Jira, Splunk, ELK, Sumo Logic and AWS S3.threatmapper.org · 30 Sept 2026
- CI/CD
- Image-build scanning supports CircleCI, Jenkins and GitLab.threatmapper.org · 30 Sept 2026
- Sensor security
- Sensor agents communicate with the management console over TLS using a URL and API key.threatmapper.org · 30 Sept 2026
- Deployment scope
- A single console can manage multiple workload types and on-premise and cloud deployments simultaneously.threatmapper.org · 30 Sept 2026
- Sensor requirements
- Sensor requirements include 0.2 CPU cores, 200 MB to 1 GB RAM, Linux kernel version 4.4 or newer and access to console port 443.threatmapper.org · 30 Sept 2026
- Windows support
- Windows Server support is experimental and not suitable for production use.threatmapper.org · 30 Sept 2026
- Cloud scanning
- Cloud Scanner tasks run locally through Terraform modules, use typically read-only cloud API access and do not listen for remote connections or control.threatmapper.org · 30 Sept 2026
- License and support
- The ThreatMapper project is offered under the Apache 2 license, with GitHub issues and a Deepfence Community Slack channel available for support.github.com · 30 Sept 2026
Best Deepfence ThreatMapper alternatives
See all 20 All accessCh 01 Qualys External Attack Surface Management Free trialAPILinux 7.6 All accessCh 02 Snyk Open Source Free planAPILinux from $25/mo7.6 All accessCh 03 Docker Desktop Free planLinuxMac from $9/mo7.5 All accessCh 04 Kubescape Free planAPILinux Free to start7.4 All accessCh 06 Trivy Free planLinuxMac Free to start7.3 All accessCh 07 Grype Free planLinuxMac Free to start7.2
Where it ranks on Specifiction
Is Deepfence ThreatMapper yours?
Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.
Sources
- threatmapper.org/threatmapper/docs/· checked 30 Sept 2026
- threatmapper.org/threatmapper/docs/architecture/console/· checked 30 Sept 2026
- threatmapper.org/threatmapper/docs/architecture/threatgr· checked 30 Sept 2026
- threatmapper.org/threatmapper/docs/sensors/· checked 30 Sept 2026
- threatmapper.org/threatmapper/docs/architecture/cloudsca· checked 30 Sept 2026
- github.com/deepfence/ThreatMapper· checked 30 Sept 2026
- threatmapper.org· checked 30 Sept 2026