AppSecNews

IaC Security

Infrastructure as Code Security

Catch misconfigurations in Terraform, Kubernetes manifests and cloud templates before deploy.

17 tools profiled

How it differs Scans Terraform, Kubernetes manifests and other infrastructure definitions before they are applied. Scanning the built images is container security.

License
Subcategory
Deployment
Languages
Integrations
Maturity
Signals
Clear

2 tools match

Active Helm Clear all

  • Kubescape

    ARMO (CNCF project)

    IaC Security

    A CNCF tool that scans Kubernetes clusters and manifests against control frameworks such as NSA-CISA hardening guidance and CIS benchmarks.

    Open source
    Growing Verified

  • Kyverno

    The Kyverno Project (CNCF)

    IaC Security

    A Kubernetes-native policy engine that enforces, mutates and generates resources through admission webhooks, with policies written as YAML.

    Open source
    Established Verified

  • Kubescape

    ARMO (CNCF project)

    A CNCF tool that scans Kubernetes clusters and manifests against control frameworks such as NSA-CISA hardening guidance and CIS benchmarks.

    Open source Growing
    IaC Security

  • Kyverno

    The Kyverno Project (CNCF)

    A Kubernetes-native policy engine that enforces, mutates and generates resources through admission webhooks, with policies written as YAML.

    Open source Established
    IaC Security
Tick up to 4 tools above.