Checkov (T) alternatives
6 tools in the catalogue cover the same ground as Checkov (T) and can replace it depending on the need. Each one is reachable, re-checked daily, and listed with its pricing.
- Cloud Custodian (T)freePolicy-as-code engine for cloud governance and security that can detect and remediate risky cloud configurations.
- Prowler (T)freemiumCloud security posture and compliance assessment framework covering AWS, Azure, GCP, Kubernetes, and SaaS surfaces.
- ScoutSuite (T)freeMulti-cloud auditing tool that inventories cloud resources and highlights security risks in an interactive HTML report.
- Steampipe (T)freemiumSQL interface over cloud APIs and services, enabling ad hoc querying of AWS, Azure, GCP, and many other data sources.
- AADInternals (T)freePowerShell toolkit for Azure AD and Entra ID assessment, including tenant reconnaissance and hybrid identity attack-path analysis.
- Amass (T)freeAdvanced attack surface mapping framework for DNS and subdomain enumeration with graph correlation and extensive data-source support.
Checkov (T)
Cloud Infrastructure
Also written Checkov
Infrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.
RECOMMENDED USE
Shift-left cloud misconfiguration detection in IaC repositories
Information
Video tutorials
Learn to use Checkov (T)
Suggested workflow
Chain these tools in order for a complete investigation
Similar tools
These tools can also help you
MicroBurst (T)
Cloud InfrastructurePowerShell collection focused on Azure security assessment, including subscription discovery and cloud service misconfiguration checks.
Cloud Custodian (T)
Cloud InfrastructurePolicy-as-code engine for cloud governance and security that can detect and remediate risky cloud configurations.
Prowler (T)
Cloud InfrastructureCloud security posture and compliance assessment framework covering AWS, Azure, GCP, Kubernetes, and SaaS surfaces.
Steampipe (T)
Cloud InfrastructureSQL interface over cloud APIs and services, enabling ad hoc querying of AWS, Azure, GCP, and many other data sources.
User reviews
Be the first to leave a review