Open-source alternatives to Kics

ThreatMapper is a cloud native application protection platform and infrastructure security scanner. It functions as a vulnerability management system and cloud workload telemetry collector designed to monitor workloads and detect security risks across cloud and container environments. The platform distinguishes itself through a network traffic visualizer that uses machine learning to classify communication patterns and a graph-based attack mapping system to identify high-risk paths between vulnerabilities and network dependencies. Its broader capabilities cover cloud infrastructure complianc

The Snyk CLI is a command-line security scanner that detects known vulnerabilities across open-source dependencies, proprietary application code, container images, and infrastructure-as-code configuration files. It also serves as a platform management tool, allowing users to configure organizations, users, SSO, and reporting from the terminal rather than the web dashboard. The CLI integrates directly into development workflows, enabling scanning within IDEs, build pipelines, and version control systems. It implements static analysis with interfile data flow analysis to find complex security f

CLI tool to generate terraform files from existing infrastructure (reverse Terraform).

Generate Terraform moved blocks automatically for painless refactoring

A formatting tool to help make large Terraform plans easier to review.

A tool to bring existing Azure resources under Terraform's management

Least privilege AWS IAM Terraformer

Layerform helps engineers create reusable environment stacks using plain .tf files. Ideal for multiple "staging" environments.

:earth_africa: :clipboard: A web dashboard to inspect Terraform States

terradozer

A command line tool that validates AWS IAM Policies in a Terraform template against AWS IAM best practices

Terraform Provider Lint Tool

Terraform in Rust

HashiCorp plugin for the asdf version manager maintainer=@DustinChaloupka, @nathantypanski, @radditude

aws2tf - automates the importing of existing AWS resources into Terraform and outputs the Terraform HCL code.

🤖 AI-powered Terraform module management across AWS, GCP, Azure, DigitalOcean - Save 97% of maintenance time

A CLI utility to sort Terraform variables and outputs

Infrastructure as code generator - from visual diagrams created with Cloudcraft.co to Terraform

This project is a set of git pre-commit hooks designed to automate the formatting, linting, and validation of Terraform configurations. It functions as an infrastructure as code linter, security scanner, cost estimator, and documentation generator to ensure code quality before commits are finalized. The tool distinguishes itself by providing specialized capabilities for infrastructure workflows, such as scanning templates for security vulnerabilities and hardcoded secrets, calculating projected cloud spending against budgets, and automatically extracting module definitions to populate readme

Terraform code generator for consistent codebase and DRY

Grype is a command-line security scanner designed to identify known vulnerabilities within container images, filesystems, and software manifests. It functions as a software composition analysis tool that detects security flaws in application components and open-source libraries to support supply chain security. The tool distinguishes itself by reconstructing the final state of container images through layered filesystem inspection and normalizing diverse package formats into a unified dependency graph. It maintains a local cache of security advisories synchronized from multiple upstream sourc

Interactive visualizations of Terraform dependency graphs using d3.js

Terrascan is an infrastructure as code security scanner and cloud configuration auditor designed to detect security violations and compliance risks in cloud templates and Dockerfiles before provisioning. It utilizes the Open Policy Agent to evaluate infrastructure templates against both standard security policies and custom organizational rules. The project functions as a security guardrail within build pipelines, blocking risky deployments by integrating scanning logic directly into CI/CD workflows. It also includes a container registry vulnerability scanner that collects vulnerability data

Display your Terraform module call stack in your terminal

Manage Infrastructure as Code with less pain.

tfsec is a static analysis tool and infrastructure as code linter designed to detect security misconfigurations and compliance violations in Terraform infrastructure code. It functions as a cloud security posture tool and policy enforcement engine that evaluates configurations against established security benchmarks. The tool provides multi-cloud security auditing for providers including AWS, Azure, Google Cloud, and Kubernetes, as well as specialized scanning for DigitalOcean, OpenStack, CloudStack, and GitHub configurations. It identifies insecure settings such as public access or unencrypt