Best Cloud Vulnerability Scanners in 2026
Updated
In short: Intruder is ranked #1 of 24 as of 5 October 2026, ahead of Mondoo CSPM and Trivy. The best-ranked option with a free plan is Mondoo CSPM. The lowest first paid tier on this page is Alibaba Cloud Security Center at $1/mo.
Cloud vulnerability scanners help you examine security across cloud platforms, infrastructure-as-code, identities, and workloads. Compared on attack path analysis, identity analysis, IaC scanning, and workload scanning, the entries also indicate supported cloud platforms and deployment models. Free-plan availability and paid-from pricing add cost context. Intruder, Mondoo CSPM, and Trivy are among the options to compare, along with Grype and Kubescape. Consider the environments you need to assess and which kinds of scanning are relevant to your work; the listed coverage and deployment details offer concrete ways to evaluate fit.
24 cloud vulnerability scanners ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
11 of the 24 here have a free tier you can use, 0 have open-source code on record, and 0 have full bars: free, open, on most of your devices and documented.
| # | App | Signal | Free tier | Open code | Devices | From | Score |
|---|---|---|---|---|---|---|---|
| 1 | IntruderWeb · Windows · Mac · Linux · API | Three bars | — | 4 of 6 | Free | 6.6 | |
| 2 | Mondoo CSPMWeb · Windows · Mac · Linux · API | Three bars | — | 4 of 6 | Free | 6.6 | |
| 3 | TrivyWindows · Mac · Linux · Self-hosted | Three bars | — | 3 of 6 | Free | 6.6 | |
| 4 | GrypeWindows · Mac · Linux · Self-hosted | Three bars | — | 3 of 6 | Free | 6.5 | |
| 5 | KubescapeWindows · Mac · Linux · Self-hosted · API | Three bars | — | 3 of 6 | Free | 6.5 | |
| 6 | Prowler CloudWeb · Linux · Self-hosted · API | Two bars | — | 2 of 6 | $99/mo | 6.5 | |
| 7 | Cy5 Cloud-Native Vulnerability ManagementWeb | Two bars | — | 1 of 6 | Free | 6.4 | |
| 8 | Qualys TotalCloudWeb · API | Two bars | — | 1 of 6 | Free | 6.4 | |
| 9 | RapidFortWeb · Linux · Self-hosted | Two bars | — | 2 of 6 | Free | 6.4 | |
| 10 | ZeusCloudWeb · Self-hosted | Two bars | — | 1 of 6 | Free | 6.4 | |
| 11 | Onam Security API SecurityWeb · Self-hosted · API | Two bars | — | 1 of 6 | $22/mo | 6.3 | |
| 12 | SUSE Multi-Linux ManagerWeb · Linux · Self-hosted · API | One bar | — | — | 2 of 6 | — | 5.5 |
| 13 | AccuKnoxWeb · Linux · Self-hosted | One bar | — | — | 2 of 6 | — | 5.4 |
| 14 | Alibaba Cloud Security CenterWeb | One bar | — | — | 1 of 6 | $1/mo | 5.4 |
| 15 | OpenCNAPPSelf-hosted | One bar | — | — | 0 of 6 | — | 5.3 |
| 16 | Holm Security Cloud SecurityWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 17 | Tencent Cloud Security CenterWeb | No signal | — | — | 1 of 6 | — | 5.2 |
| 18 | Astra SecurityWeb · API | One bar | — | — | 1 of 6 | $58.25/mo | 5.1 |
| 19 | Google Artifact AnalysisWeb · Mac · Linux · API | Two bars | — | — | 3 of 6 | — | 5.1 |
| 20 | Cyscale CSPMWeb · API | One bar | — | — | 1 of 6 | $850/mo | 5.0 |
| 21 | Tenable One Cloud SecurityWeb | One bar | — | — | 1 of 6 | — | 5.0 |
| 22 | Tencent Cloud CDNWeb | One bar | — | — | 1 of 6 | CNY 21/mo | 5.0 |
| 23 | Amazon InspectorWeb · API | One bar | — | — | 1 of 6 | — | 4.9 |
| 24 | Anchore EnterpriseWeb · Linux | No signal | — | — | 2 of 6 | — | 4.8 |
Compare all 24 in a table
| # | App | Score | Free plan | From | Free plan | Paid from | Cloud platforms | Workload scanning |
|---|---|---|---|---|---|---|---|---|
| 1 | Intruder | 6.6 | Free plan | Free | Yes | — | — | — |
| 2 | Mondoo CSPM | 6.6 | Free plan | Free | Yes | — | — | — |
| 3 | Trivy | 6.6 | Free plan | Free | Yes | — | — | — |
| 4 | Grype | 6.5 | Free plan | Free | Yes | — | — | — |
| 5 | Kubescape | 6.5 | Free plan | Free | Yes | — | — | — |
| 6 | Prowler Cloud | 6.5 | Free plan | $99/mo | No | — | — | — |
| 7 | Cy5 Cloud-Native Vulnerability Management | 6.4 | Free plan | Free | — | — | AWS, Azure, GCP | Yes |
| 8 | Qualys TotalCloud | 6.4 | Free plan | Free | No | — | AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure | — |
| 9 | RapidFort | 6.4 | Free plan | Free | Yes | — | — | — |
| 10 | ZeusCloud | 6.4 | Free plan | Free | Yes | — | AWS | — |
| 11 | Onam Security API Security | 6.3 | Free plan | $22/mo | Yes | — | — | — |
| 12 | SUSE Multi-Linux Manager | 5.5 | No | — | — | — | — | — |
| 13 | AccuKnox | 5.4 | No | — | Yes | — | AWS; Azure; GCP; Oracle; OpenStack; OpenShift; Nutanix; VMware; IBM Cloud; DigitalOcean; Alibaba Cloud | — |
| 14 | Alibaba Cloud Security Center | 5.4 | No | $1/mo | Yes | — | Alibaba Cloud, AWS, Azure, Huawei Cloud, Tencent Cloud, Volcano Engine | Yes |
| 15 | OpenCNAPP | 5.3 | No | — | — | — | — | — |
| 16 | Holm Security Cloud Security | 5.2 | No | — | — | — | AWS, Microsoft Azure, Microsoft 365, Google Cloud, Oracle Cloud | — |
| 17 | Tencent Cloud Security Center | 5.2 | No | — | Yes | — | Tencent Cloud and other cloud platforms | Yes |
| 18 | Astra Security | 5.1 | No | $58.25/mo | Yes | — | — | — |
| 19 | Google Artifact Analysis | 5.1 | No | — | No | — | — | — |
| 20 | Cyscale CSPM | 5.0 | No | $850/mo | No | — | — | — |
| 21 | Tenable One Cloud Security | 5.0 | No | — | — | — | — | — |
| 22 | Tencent Cloud CDN | 5.0 | No | CNY 21/mo | Yes | — | Tencent Cloud and other cloud platforms | Yes |
| 23 | Amazon Inspector | 4.9 | No | — | No | — | — | — |
| 24 | Anchore Enterprise | 4.8 | No | — | No | — | — | — |
Is your app on this list?
Numbered spots on this list can be sponsored, and a sponsored row is labelled as paid.
Questions about this list
Which cloud vulnerability scanner is ranked first on Freedom251?
Intruder is ranked #1 of 24 with a score of 6.6. Mondoo CSPM is second and Trivy third.
How many of these have a free plan?
11 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Alibaba Cloud Security Center has the lowest first paid tier we found: $1/mo.
How is this list ranked?
Ranked free-and-open first: a usable free tier and open-source code, then the platforms it runs on and its documentation.