Side by side
Deepfence ThreatMapper vs Grype
Both stand on container security software. Which one you can start free with, which one lets you read the code, and what each costs once you pay.
Free plan APILinuxSelf-hosted+2
ThreatMapper combines workload discovery, vulnerability scanning, secret detection and compliance assessment in a self-hosted project. Its broad deployment scope and integrations may suit teams managing several kinds of production workloads.
Visit Deepfence ThreatMapper Free plan Open source LinuxMacSelf-hosted+1
Grype covers a broad range of scan targets and package ecosystems, with several output formats and vulnerability prioritization options. Its update policy and best-effort support are worth considering.
Visit GrypeThe facts
| Deepfence ThreatMapper | Grype | |
|---|---|---|
| Free plan | Yes | Yes |
| Open source | Not published | Yes |
| Runs on | API, Linux, Self-hosted, Web, Windows | Linux, Mac, Self-hosted, Windows |
| Lowest paid plan | Free or on request | Free or on request |
| Plans published | 1 | 2 |
| Maker | Not published | Not published |
| Website | threatmapper.org | github.com |
| On container security software | #5 of 26 | #1 of 26 |
Deepfence ThreatMapper: what it does well
- Free plan with no limits or hidden features.
- Maps workloads, topology and attack surface.
- Generates runtime SBOMs and checks vulnerability feeds.
- Correlates security findings with live network context.
- Supports multiple workload types and deployment environments.
What to know first
- Windows Server support is experimental, not for production.
- Sensors require Linux kernel 4.4 or newer.
- Sensor agents need access to console port 443.
Grype: what it does well
- Scans images, files, archives, directories, SBOMs, and packages.
- Covers major operating-system and language package ecosystems.
- Uses EPSS, KEV, and risk scoring to prioritize findings.
- Supports table, JSON, SARIF, and custom Go template output.
What to know first
- Security updates apply only to the latest release.
- Support is described as best effort.
Alternatives to Deepfence ThreatMapper Alternatives to Grype The whole list