kics

kics.iosite

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your infrastructure-as-code. Supports Terraform, Kubernetes, Docker, AWS CloudFormation and Ansible

from

Static Analysis & Code Quality

added

2026-10-10

likes

0

similar

1. ▲
   KICS github.com

   tool category #docker link ↗

   An infrastructure-as-code scanning tool, find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle. Can be extended for additional policies.

   
2. ▲
   bridgecrewio/checkov :fire::fire::fire::fire::fire: github.com

   tool category #aws link ↗

   Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.

3. ▲
   kube-hunter aquasecurity.github.io

   site category #static-analysis link ↗

   Hunt for security weaknesses in Kubernetes clusters.

4. ▲
   terrascan github.com

   tool category #static-analysis link ↗

   Collection of security and best practice tests for static code analysis of Terraform templates.

5. ▲
   Code Intelligence code-intelligence.com

   site category #static-analysis link ↗

   copyright: — CI/CD-agnostic DevSecOps platform which combines industry-leading fuzzing engines for finding bugs and visualizing code coverage

6. ▲
   terrascan github.com

   tool category #terraform link ↗

   Collection of security and best practice test for static code analysis of terraform templates

   

Static Analysis & Code Quality › Other: “Find security vulnerabilities, compliance issues, and infrastructure misconfigurations in your infrastructure-as-code. Supports Terraform, Kubernetes, Docker, AWS CloudFormation and Ansible”