Open Source Tools · Category
Cloud security posture checks and infrastructure-as-code scanners that catch misconfigurations before and after deployment.
Alternatives toPrisma CloudWiz
8 tools
All-in-one scanner for images, code, IaC and clusters
Scanner from Aqua Security that finds vulnerabilities, misconfigurations, secrets and licences in container images, file systems, repositories and Kubernetes.
Template-based vulnerability scanner
Fast vulnerability scanner driven by YAML templates, with thousands of community templates for CVEs, misconfigurations and exposures across many protocols.
Cloud security posture and compliance checks
Open-source cloud security platform that runs hundreds of checks against AWS, Azure, Google Cloud, Kubernetes and Microsoft 365, mapped to compliance frameworks.
Kubernetes security posture and compliance scanner
CNCF project that scans clusters, manifests and Helm charts against frameworks such as the NSA-CISA guidance and CIS Benchmarks, and scans images.
Static analysis for infrastructure as code
Policy-as-code scanner for Terraform, CloudFormation, Kubernetes, Helm, Dockerfiles and more, with graph-based checks across resources.
CIS Kubernetes Benchmark checks
Aqua Security tool that checks whether Kubernetes nodes and control-plane components are configured according to the CIS Kubernetes Benchmark.
Multi-cloud security auditing tool
NCC Group's multi-cloud auditing tool that collects configuration data through cloud APIs and highlights risk areas in an offline HTML report.
Infrastructure-as-code scanner with Rego queries
Checkmarx's open-source scanner for security issues and misconfigurations in IaC, with queries written in Rego across many platforms.
