Terrascan
Terrascan is an open-source security scanner designed to detect compliance and security violations in Infrastructure as Code (IaC) configurations.
Our verdict
Who it's for
Detect compliance and security violations across Infrastructure as Code (IaC) to mitigate risk.
Who should look elsewhere
Configuration required
Pros
- +Infrastructure as Code security scanner
- +Policy as code approach
- +Multi-IaC support (Terraform, K8s, etc.)
- +Open-source and free
- +CI/CD integration ready
Cons
- −Configuration required
- −False positives possible
- −Policy writing needed
- −Learning curve for rules
- −May slow CI pipelines
Key features
- ✓IaC security
- ✓Policy as code
- ✓Compliance scanning
- ✓Multi-platform
- ✓CI/CD integration
- ✓Open source
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Open Source | $0 | month | Free Apache 2.0 license; 500+ built-in rules; CIS benchmarks |
Integrations
GitHub