DryRun Security IaC Security vs Winfunc Infrastructure Scanner
DryRun Security IaC Security
dryrun.securityWinfunc Infrastructure Scanner
winfunc.comSide by side
| Figure | DryRun Security IaC Security | Winfunc Infrastructure Scanner |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 1 | 4 |
| Spec score · Infrastructure as Code Security Software | 8.3 (#9) | 7.8 (#16) |
| Company founding | DryRun Security was founded by James Wickett and Ken Johnson and publicly emerged from stealth in May 2023. | Stition, Inc. was incorporated in Delaware in 2024. |
| Deployment | DryRun is delivered as SaaS. | The Trust Center describes self-hosted deployment on premises or in a private cloud, with data remaining within the customer’s perimeter. |
| Integrations | The product page lists Claude Code, Claude Desktop, Codex, Cursor, GitHub, GitLab, and Slack integrations. | The platform lists GitHub, GitLab, Bitbucket, Azure DevOps, GitHub Actions, Jenkins, CircleCI, Jira, Slack and Microsoft Teams integrations. |
Plans
Winfunc Infrastructure Scanner
- One-time$500, paid once
- EnterprisePriced on request
- Pay as you goPriced on request
- RecurringPrice not published
In their own words
DryRun Security IaC Security
DryRun Security IaC Security scans infrastructure-as-code changes for security risks by analyzing infrastructure and application code together. It covers Terraform, Kubernetes, and other IaC, with checks for overly permissive IAM policies, publicly exposed resources, insecure defaults, and subdomain takeover risks. Scans run in pull requests and provide guidance during infrastructure design. Teams can write natural-language guardrails for public access, permitted cloud regions, approved resource types, and organization-specific requirements; the Custom Policy Agent enforces them on changes. Terraform findings can appear as pull-request comments and Risk Register entries containing the affected resource, risk description, and remediation guidance. Listed integrations include Claude Code, Claude Desktop, Codex, Cursor, GitHub, GitLab, and Slack. The SaaS service supports GitHub.com personal, organization, and Enterprise Cloud repositories, plus GitLab SaaS; custom instances and other source-control systems require contacting DryRun. DryRun says it uses private models, sends no data to public AI systems, stores minimal metadata and findings, and allows code-access revocation through repository permissions. Pricing is on request, aligned with team size, and a free trial is available.
Winfunc Infrastructure Scanner
Winfunc Infrastructure Scanner has no write-up on Specifiction yet; its figures are above.