Freedom251 › Trivy

Instead of Trivy

Trivy alternatives

Trivy is a free, Apache-2.0 scanner for repositories, binary artifacts, container images, and Kubernetes clusters. It checks vulnerabilities, misconfigurations, secrets, and licenses, generates SBOMs, and supports operating-system and language ecosystems from Ruby and Python to Java, Go, Rust, and Swift. It runs on Linux, macOS, Windows, and FreeBSD, can be self-hosted or used as a container image, and offers official GitHub Actions and Azure DevOps integrations. Trivy Operator can continuously scan Kubernetes workloads and clusters, while binary deployment avoids middleware or database dependencies.

1. 1 S

   ScanCode.io

   Free plan APILinuxMac+3

   Software composition, license, and copyright analysis — ScanCode.io adds Web UI and API workflows for containers, archives, and manifests, with license, copyright, source, and vulnerability information.

   Open source Visit site
2. 2

   Snyk Open Source

   Free plan APILinuxMac+2

   Dependency prioritization and automated remediation — Snyk Open Source adds reachability-based risk scoring, one-click upgrade pull requests, continuous monitoring, and license policy enforcement.

   Free plan · paid from $25/mo Visit site
3. 3

   Sonatype Nexus Repository

   Free plan APILinuxMac+3

   Enterprise artifact storage and distribution — Nexus Repository manages and distributes packages, models, components, and build artifacts across more than 20 formats rather than scanning them like Trivy.

   Pricing on request Visit site
4. 4 A

   Accessibility Test Framework for Android

   Free plan AndroidLinuxMac+1

   Automated Android accessibility checks — Accessibility Test Framework for Android checks Android View and AccessibilityNodeInfo objects, including missing content descriptions, instead of security vulnerabilities.

   Free plan Visit site
5. 5

   DepWarden

   Free plan APILinuxMac+3

   Prioritized SCA, SAST, and SBOM workflows — DepWarden combines SCA and SAST across 15 languages and IaC formats, ranks exploitability, and exports SBOM, OpenVEX, and NOTICE files.

   Free plan Visit site
6. 6

   Docker Desktop

   Free plan LinuxMacWeb+1

   Local container development and debugging — Docker Desktop bundles Engine, CLI, Compose, Build, Kubernetes, and Debug for developing and managing containers rather than scanning software broadly.

   Free plan Visit site
7. 7

   Eclipse Steady

   Free plan APILinuxMac+2

   Java and Python reachability analysis — Eclipse Steady combines static and dynamic evidence to assess whether vulnerable Java or Python code is reachable or executed.

   Open source Visit site
8. 8 G

   Grype

   Free plan Open source LinuxMacSelf-hosted+1
   9.1 Free plan Visit site
9. 9 O

   OWASP ZAP

   Free plan Open source APIExtensionLinux+3
   8.8 Free plan Visit site
10. 10

    Intruder

    Free plan APILinuxMac+2
    7.4 Free plan · 14-day trial Visit site
11. 11

    ManageEngine Vulnerability Manager Plus

    Free plan APILinuxMac+3
    7.4 Free plan · paid from $695/yr · 30-day trial Visit site
12. 12

    Detectify Surface Monitoring

    Free plan APIWeb
    7.3 From €90/mo · 14-day trial Visit site
13. 13

    Nuclei

    Free plan LinuxMacSelf-hosted+1
    7.3 Free plan Visit site
14. 14

    OpenVAS

    Free plan APILinuxMac+3
    7.2 Free plan · 14-day trial Visit site
15. 15

    Acunetix

    Free trial APILinuxSelf-hosted+2
    6.6 Pricing on request Visit site
16. 16

    Burp Suite DAST

    Free trial APILinuxSelf-hosted+2
    6.5 Pricing on request Visit site
17. 17

    Astra Security

    Free trial APIWeb
    6.3 Free plan · paid from $69/mo · 7-day trial Visit site
18. 18

    Kiuwan Code Security

    Free trial APILinuxMac+3
    6.3 From $49/user/mo (annual) Visit site
19. 19 G

    Greenbone Community Edition

    Free plan LinuxWeb
    6.1 Free plan Visit site
20. 20 C

    Clair

    Free plan Linux
    6.0 Free plan Visit site
21. 21 S

    StackHawk HawkScan

    Free trial APILinuxMac+3
    6.0 From $5/mo Visit site
22. 22 S

    Snyk Container

    Free plan Web
    5.8 Free plan · paid from $25/mo Visit site
23. 23 H

    HCL AppScan Source

    Paid LinuxSelf-hostedWindows
    5.7 Pricing on request Visit site
24. 24

    Invicti

    Paid APISelf-hostedWeb
    5.7 Pricing on request Visit site
25. 25

    Mend.io

    Paid Web
    5.3 Pricing on request Visit site
26. 26

    Rapid7 InsightVM

    Paid LinuxMacWeb+1
    4.8 From $1.62/mo Visit site
27. 27 T

    Tenable Nessus

    Paid LinuxMacWindows
    4.7 From $4,790/yr Visit site
28. 28

    Checkmarx One

    Paid Web
    4.6 Pricing on request Visit site
29. 29

    Rapid7 InsightAppSec

    Paid WebWindows
    4.6 From $175/mo (annual) Visit site
30. 30 Q

    Qualys Vulnerability Management

    Paid Web
    4.5 From $2,195 · 7-day trial Visit site
31. 31 O

    OpenText Fortify Software Security Platform

    Paid Web
    4.3 Pricing on request Visit site

Switching may make sense when your software includes third-party or self-compiled packages, which Trivy may skip. Its plugins also run unsandboxed with your permissions. The alternatives differ in focus: composition analysis, license and copyright review, artifact management, dependency remediation, Android accessibility, container development, or code-reachability analysis. Compare which targets need scanning, whether you need SBOM exchange or policy controls, how findings are prioritized and fixed, supported integrations and deployment, and platform fit. Price ranges from free open-source tools to paid or freemium services.

← Back to Trivy The whole vulnerability scanner software list