FREEDOM251

Freedom251 › Developer Tools

Free and open first

Best IaC Security Scanners in 2026

  1. 1

    Kubescape

    Free plan Open source APILinuxMac+2

    Choose Kubescape if you want a free, self-hosted Kubernetes security platform with configuration, image, compliance, and runtime coverage.

    8.9 Free plan Visit site
  2. 2

    DeepSource

    Free plan APILinuxMac+3

    DeepSource combines pull request review with security scans and code-coverage thresholds. Compare the free tier’s monthly allowances with your review volume, and note the annual billing on Team.

    7.5 Free plan · paid from $24/user/mo (annual) · 14-day trial Visit site
  3. 3

    cfn-nag

    Free plan LinuxMacSelf-hosted

    Choose cfn-nag if your team needs a free, customizable scanner focused on CloudFormation security patterns, including use in GitHub Actions or AWS CodePipeline.

    7.4 Free plan Visit site
  4. 4

    Fairwinds Polaris

    Free plan LinuxMacSelf-hosted+2

    Choose Polaris if your Kubernetes team wants a free, open source way to validate resource configuration across dashboard, admission, and CI/CD workflows.

    7.4 Free plan Visit site
  5. 5

    kube-score

    Free plan LinuxMacSelf-hosted+2

    kube-score offers configurable static checks for Kubernetes resources, with browser, local, and CI/CD workflows.

    7.3 Open source Visit site
  6. 6

    Checkov

    Free plan LinuxMac

    Checkov offers broad infrastructure-as-code scanning, policy customization, and CI and IDE integrations at no cost. Alpine users should note the project’s stated testing and Python requirements.

    7.2 Free plan Visit site
  7. 7

    KubeLinter

    Free plan LinuxMacSelf-hosted

    KubeLinter offers configurable static checks for Kubernetes manifests, with output that can be used in automated workflows.

    7.2 Open source Visit site
  8. 8

    Pulumi

    Free plan APILinuxMac+3

    Pulumi brings infrastructure definitions, deployment integrations, and secrets management into one platform. Its free plan has user and workflow-minute limits; listed paid plans start at $40 a month.

    7.2 Free plan · paid from $40/mo Visit site
  9. 9

    TFLint

    Free plan LinuxMacSelf-hosted+1

    TFLint provides local Terraform linting with cloud checks, extensible rules, and several output formats.

    7.0 Free plan Visit site
  10. 10

    Trivy

    Free plan LinuxMacSelf-hosted+1

    Trivy combines several scanner types with broad installation and integration options, and it can generate SBOMs.

    6.9 Free plan Visit site
  11. 11

    terraform-compliance

    Free plan LinuxSelf-hosted

    Pick terraform-compliance if you need free policy tests for Terraform and want rules expressed in readable scenarios.

    6.7 Free plan Visit site
  12. 12

    AWS CDK Nag

    Free plan LinuxMacWindows
    6.5 Free plan Visit site
  13. 13

    PSRule for Azure

    Free plan LinuxMacWindows
    6.0 Free plan Visit site
  14. 14

    Safeguard IaC Security

    Free plan Web
    5.8 Free plan · paid from $9/mo Visit site
  15. 15

    Snyk IaC

    Free plan Web
    5.7 Free plan · paid from $25/mo Visit site
  16. 16

    AWS CloudFormation Guard

    Paid LinuxMacWindows
    4.8 Open source Visit site

#1Places #1, #2, #3, #4, #5 on this list can be bought by the makers of the software on it. See the price

More in Developer Tools