Browse & filter

Static analysis engine matching AST patterns—rules for OWASP classes, secrets, and custom policies.

All-in-one scanner for container images, IaC, Kubernetes manifests, SBOMs, and VM OS packages with CI integrations.

Application vulnerability management: ingest findings from scanners, dedupe, risk scoring, metrics, and Jira/CI hooks.

Static analysis for Terraform, CloudFormation, Kubernetes, Docker, and more—hundreds of built-in policy checks.

IaC scanner detecting security issues across Terraform, Kubernetes, Helm, Docker, and cloud APIs via OPA/Rego policies.

Kubernetes-native policy engine using YAML (no Rego) for validate, mutate, generate, and image verification rules.

Google tool to find known vulnerabilities in open source dependencies from lockfiles, SBOMs, or directories using the OSV database.

Kubernetes security scanner for misconfigurations, RBAC, compliance frameworks (NSA/CIS), and image vulnerabilities.

CLI to audit Kubernetes manifests and clusters for security misconfigurations (capabilities, read-only root, privileged, etc.).

Secret scanner for git history, CI, and filesystems with verified credential checks against live APIs where safe.