Checkov
Checkov is an open-source static analysis tool for infrastructure as code.
Our verdict
Who it's for
Infrastructure as code security
Who should look elsewhere
False positives
Pros
- +IaC security scanning
- +Many frameworks
- +Open source
- +Policy as code
- +CI/CD integration
Cons
- −False positives
- −Learning curve
- −Output verbose
- −Custom policies complex
- −Documentation gaps
Key features
- ✓IaC scanning
- ✓Policy as code
- ✓Multi-framework
- ✓CI/CD integration
- ✓Custom policies
- ✓Open source
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Open Source | $0 | month | 750+ built-in policies; CIS, PCI, HIPAA compliance; Custom policies (Python/YAML) |
| Prisma Cloud | — | month | All open source features; Runtime scanning; Pull request annotations |
Integrations
SlackGitHub