Infrastructure as Code Security articles

Guides and comparisons for choosing tools, written to the same editorial standard as the profiles.

IaC Security comparison

Checkov vs KICS: Graph Checks or Rego Queries

Checkov and KICS both gate IaC in pull requests. The choice turns on how you write policy: Python and graph checks, or Rego queries.

28 Sep 2026 7 min read

IaC Security roundup

A practitioner's guide to IaC security tools: manifest scanners, policy engines, admission controllers and cloud platforms, and when each one wins.

28 Sep 2026 12 min read