Audience
Developers and DevOps teams
About Checkov
Verify changes to hundreds of supported resource types in all major cloud providers. Scan cloud resources in build-time for misconfigured attributes with a simple Python policy-as-code framework. Analyze relationships between cloud resources using Checkov’s graph-based YAML policies. Execute, test, and modify runner parameters in the context of a subject repository CI/CD and version control integrations. Extend Checkov to define your own custom policies, providers, and suppressions terms. Prevent misconfigurations from being deployed by embedding it into existing developer workflows. Enable automated pull/merge request annotations on your repositories without having to build a CI pipeline or run scheduled checks. The Bridge crew platform will automatically scan new pull requests and annotate them with comments for any policy violations discovered.
Other Popular Alternatives & Related Software
CodeAnt AI
Summarize pull request changes concisely to help the team quickly understand their impact. Detect and auto-fix code quality issues and anti-patterns for 30+ languages. Scan every code change for OWASP, CWE, SANS, and NIST vulnerabilities, and fix them. Scan every PR against over 10,000 policies to detect infrastructure as code issues and understand their impact. Identifies and protects sensitive information in your codebase, including API keys, tokens, and other secrets. Identify potential issues in code logic, and data structures, and understand their impact. Get a Code Health Dashboard and gain instant visibility into your code and infrastructure's health. Identify high-severity issues, understand their impact, and fix them. Receive weekly executive reports on new issues found, fixed, and pending resolution. Your pair programmer that will help you find and auto-fix over 5000+ code quality issues and security vulnerabilities without leaving the IDE.
Learn more
Trivy
Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues. Trivy supports the most popular programming languages, operating systems, and platforms. Trivy is available in the most common distribution channels. Trivy is integrated with many popular platforms and applications. Trivy is integrated into many popular tools and applications so that you can easily add security to your workflow. Find vulnerabilities, misconfigurations, secrets, and SBOM in containers, Kubernetes, code repositories, clouds, and more.
Learn more
Kiuwan Code Security
Security Solutions For Your DevOps Process.
Automatically scan your code to identify and remediate vulnerabilities. Compliant with the most stringent security standards, such as OWASP and CWE, Kiuwan Code Security covers all important languages and integrates with leading DevOps tools.
Effective static application security testing and source code analysis, with affordable solutions for teams of all sizes. Kiuwan includes a variety of essential functionality in a single platform that can be integrated directly into your internal development infrastructure.
Fast Vulnerability Detection: Easy and instant setup. Start scanning and get results in just minutes.
DevOps Approach To Code Security: Integrate Kiuwan with your Ci/CD/DevOps pipeline to automate your security process.
Flexible Licensing Options: Plenty of options, one time scans or continuous scanning. Kiuwan also offers a Saas or On-Premise model.
Learn more
Cycode
A platform for security, governance, and pipeline integrity for all your development tools & infrastructure. Harden your source control management systems (SCM), find secrets, leaks and prevent code tampering. Scan your CI/CD settings and Infrastructure-as-Code (IaC) for security misconfiguration. Identify drift between production systems IaC configurations and prevent source code tampering. Stop developers from inadvertently exposing proprietary code in public repositories, fingerprint code assets and proactively identify exposure on public sites. Inventory assets, enforce security policies, and easily demonstrate compliance across all your DevOps tools and infrastructure, both in the cloud and on-premises. Scan IaC for security misconfigurations and ensure compliance between defined IaC configurations and production infrastructure. Scan every commit or pull/merge request for hard-coded secrets and prevent them from reaching the master branch across all SCMs and programming languages.
Learn more
Pricing
Starting Price:
Free
Pricing Details:
Open source
Free Version:
Free Version available.
Integrations
Company Information
Prisma Cloud
Founded: 2019
United States
www.checkov.io
Videos and Screen Captures
You Might Also Like
All-in-One IT Monitoring - No More Blind Spots
Tired of switching between different tools and missing critical alerts? PRTG brings everything together, monitoring your entire IT infrastructure from a single, intuitive interface. Whether it’s servers, switches, printers, or cloud services, you get instant visibility and clear notifications - no technical jargon, no clutter. Set up in minutes, PRTG helps you prevent downtime, reduce stress, and prove your value to your company. Focus on your job, not on chasing issues. Try PRTG and experience true IT peace of mind.
Product Details
Platforms Supported
Cloud
Training
Documentation
Support
Online