Alternatives to tfsec

Terrascan

Code Security Scanning

Open source static code analysis tool for IaC detecting security vulnerabilities and compliance violations in Terraform and more.

KICS

Infrastructure as Code

Open source IaC security scanner from Checkmarx finding security vulnerabilities and compliance issues in Terraform, Ansible, and more.

Fortify

Code Security Scanning

OpenText application security tool providing static and dynamic analysis, SCA, and runtime protection for enterprise software.

Cyfrin

Code Security Scanning

Smart contract security platform offering audits, developer education, and the Aderyn open-source analyzer.

BluBracket

Code Security Scanning

Code security platform providing secret detection, code access monitoring, and policy enforcement for source code repositories.

Bearer

Code Security Scanning

Bearer is an open-source static analysis tool that scans code for security risks and data privacy violations in application code.

Trivy

Container Security

Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.

CloudQuery

Data Integration Platforms

Open source data integration platform for security and compliance that syncs cloud infrastructure data to any database.

Open source static analysis security vulnerability scanner specifically for Ruby on Rails applications.

SpectralOps

Cloud Security

Check Point-acquired code security platform detecting secrets, misconfigurations, and security issues in code, assets, and infrastructure.