tfsec
tfsec is a static analysis security scanner designed for Terraform code.
Our verdict
Who it's for
Security scanner for your Terraform code.
Who should look elsewhere
Terraform specific only
Pros
- +Terraform security scanner
- +Static analysis for IaC
- +Many built-in rules
- +CI/CD integration ready
- +Open-source and free
Cons
- −Terraform specific only
- −False positives possible
- −Rule customization needed
- −Now part of Trivy (Aqua Security)
- −Migration to Trivy recommended
Key features
- ✓Terraform security
- ✓Static analysis
- ✓Custom rules
- ✓CI/CD integration
- ✓Multiple formats
- ✓Open source
Pricing
| Plan | Price | Billing | Notes |
|---|---|---|---|
| Free | $0 | month | Terraform security scanning; Static analysis; CI/CD integration |