CFRipper vs Winfunc Infrastructure Scanner
CFRipper
github.comWinfunc Infrastructure Scanner
winfunc.comSide by side
| Figure | CFRipper | Winfunc Infrastructure Scanner |
|---|---|---|
| Price from | Free | — |
| Free plan | Yes | — |
| Free trial | — | — |
| Open source | Yes | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | — | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 2 | 4 |
| Spec score · Infrastructure as Code Security Software | 8.9 (#4) | 7.8 (#16) |
| Purpose | CFRipper is a library and CLI security analyzer for AWS CloudFormation templates that aims to prevent vulnerable infrastructure from reaching production. | Scans infrastructure-as-code, cloud configurations, and container definitions for misconfigurations, exposed secrets, and compliance violations before production. |
| What it does | CFRipper analyzes AWS CloudFormation templates for security and compliance problems before deployment. | Winfunc scans infrastructure-as-code, cloud configurations and container definitions for misconfigurations, exposed secrets and compliance violations before production. |
Plans
Winfunc Infrastructure Scanner
- One-time$500, paid once
- EnterprisePriced on request
- Pay as you goPriced on request
- RecurringPrice not published
In their own words
CFRipper
CFRipper is a free, open-source Python library and command-line security analyzer for AWS CloudFormation templates. It examines template files to help keep vulnerable infrastructure from reaching production. The CLI accepts templates as arguments and can return text or JSON findings, with an option to save results in an output folder. Example findings include wildcard principals and IAM role policies that grant excessive permissions. Rules can be configured with a rules file and filters folder, and users can add plugins for their own compliance checks. Documented exit codes distinguish successful scans, scanning errors, invalid templates, and unhandled exceptions. CFRipper runs on Linux, macOS, Windows, or as self-hosted software. The project uses uv for dependencies, provides installation instructions for those operating systems, and is distributed under the Apache License 2.0. Its analysis scope is CloudFormation; Terraform and Kubernetes are not supported.
Winfunc Infrastructure Scanner
Winfunc Infrastructure Scanner has no write-up on Specifiction yet; its figures are above.