tenable/terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

architectureawsaws-securityazure-securitycloud-securitycloudsecuritydevopsdevsecopsgcp-securityiac

License & maintenance

Apache-2.0 is a permissive license: free to use commercially with attribution.

Last code push 11 months ago. Archived: read-only, no further updates.

	Repository	Stars	Language	License	Activity
1	prowler-cloud/prowlerProwler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environm	★ 15.1k	Python	Apache-2.0	Active
2	turbot/steampipeZero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.	★ 8k	Go	AGPL-3.0	Active
3	aquasecurity/tfsecTfsec is now part of Trivy	★ 7.1k	Go	MIT	Slowing
4	madhuakula/kubernetes-goatKubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on play	★ 5.9k	HTML	MIT	Slowing
5	aquasecurity/trivyFind vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more	★ 38.5k	Go	Apache-2.0	Active
6	getsops/sopsSimple and flexible tool for managing secrets	★ 23.4k	Go	MPL-2.0	Active
7	bytebase/bytebaseDatabase governance built for humans and agents — controlling changes and access across every major database.	★ 14.6k	Go	Other	Active
8	bunkerity/bunkerweb🛡️ Open-source and cloud-native Web Application Firewall (WAF)	★ 11.1k	Python	AGPL-3.0	Active