Cubbie Conference December 10, 2026 in San Francisco Get tickets →

Trivy by Aqua Security is an open-source comprehensive vulnerability scanner for containers, filesystems, Git repositories, and Kubernetes configurations.

Pricing

Free (open source)

Founded

2019

Team size

11-50 employees

Headquarters

San Francisco, California

Product Preview

Trivy preview

Preview from trivy.dev

At a glance

Pricing model

Free

Try before you buy

Free plan

About Trivy

Trivy is an open-source security scanner from Aqua Security that finds vulnerabilities, misconfigurations, exposed secrets, and generates SBOMs across container images, filesystems, Git repos, Kubernetes clusters, and cloud accounts. It is a developer- and DevSecOps-focused CLI that integrates into CI/CD pipelines and GitOps workflows. Widely adopted as a default scanner for cloud-native supply-chain security.

Buyer Fit & Positioning

Procurement & Fit

Structured facts from the vendor to help your security, finance, and procurement reviews move faster.

Trust

Security & compliance

The vendor hasn’t added security or compliance details yet.

Pricing

Commercial model

Pricing model: Free

Free trial: No

Free plan: Yes

Contract minimum: Not specified

Procurement

Purchasing & legal

The vendor hasn’t added purchasing & legal details yet.

Fit

Best-fit company size

Company-size fit has not been specified yet.

Implementation & Procurement

Commercial Fit & Ecosystem

Proof, Outcomes & Momentum

Alternatives, Migration & Buyer Objections