Skip to content
SPECIFICTION
Get listed

IaC Security Scanners

Alternatives to terraform-compliance

The tools Specifiction weighs against terraform-compliance, from its list of iac security scanners, each with its plans, platforms and spec score.

  1. 01 DeepSource

    DeepSource suits software teams that want automated pull-request checks, security scanning, and code coverage controls.

    From $2/mo Free plan Web · Windows · macOS · Linux
    9.3 Visit Specs
  2. 02 Kubescape

    Kubescape suits teams managing Kubernetes clusters that want configuration, image, compliance, and runtime security checks.

    From $30/mo Free plan Open source Windows · macOS · Linux · API
    9.1 Visit Specs
  3. 03 Fairwinds Polaris

    Polaris suits Kubernetes teams seeking to validate configuration practices and address supported problems automatically.

    Free plan Web · Windows · macOS · Linux
    8.8 Visit Specs
  4. 04 kube-score

    kube-score suits teams reviewing Kubernetes definitions for security and resilience concerns, especially those using Helm, Kustomize, or CI/CD.

    Free plan Web · Windows · macOS · Linux
    8.3 Visit Specs
  5. 05 Pulumi

    Pulumi suits engineers defining infrastructure in general-purpose languages across supported cloud providers.

    From $40/mo Free plan Web · Windows · macOS · Linux
    8.2 Visit Specs
  6. 06 Trivy

    It suits teams or developers scanning repositories, artifacts, container images, or Kubernetes environments for security issues.

    Free plan Windows · macOS · Linux · Self-hosted
    8.1 Visit Specs
  7. 07 cfn-nag

    cfn-nag suits teams reviewing CloudFormation security on Linux, macOS, or self-hosted systems.

    Free plan macOS · Linux · Self-hosted
    8.0 Visit Specs
  8. 08 Checkov

    Checkov suits developers and teams scanning infrastructure-as-code for configuration risks, credentials, or compliance checks.

    Free plan macOS · Linux
    7.9 Visit Specs
  9. 09 KubeLinter

    It suits teams reviewing Kubernetes manifests for security and production practices, including automated workflows.

    Free plan macOS · Linux · Self-hosted
    7.8 Visit Specs
  10. 10 TFLint

    TFLint suits Terraform users who want local checks for language issues, cloud-specific configuration errors, or naming and best-practice rules.

    Free plan Windows · macOS · Linux · Self-hosted
    7.3 Visit Specs
  11. 11 AWS CDK Nag
    Windows · macOS · Linux
    6.2 Visit Specs
  12. 12 AWS CloudFormation Guard
    Windows · macOS · Linux
    6.2 Visit Specs
  13. 13 PSRule for Azure
    Windows · macOS · Linux
    5.7 Visit Specs
  14. 14 Safeguard IaC Security
    Web
    5.5 Visit Specs
  15. 15 Snyk IaC
    Web
    5.4 Visit Specs

terraform-compliance, head to head