Trivy

Security scanner for containers, code and cloud

Trivy, from Aqua Security, scans container images, filesystems, Git repos and Kubernetes for vulnerabilities and misconfigurations.

Visit Trivy ↗

Pricing: Free

Platforms: Mac, Windows, Linux

Categories: Security & Privacy, Developer Tools

Trivy is an alternative to

Snyk

Trivy compared with similar tools

Product	Price	Open source	Self-host	Platforms
Trivy	Free	Yes	–	Mac, Windows, Linux
Snyk	Free plan	–	–	Web, API
Nuclei	Free	Yes	–	Mac, Windows, Linux
TruffleHog	Free plan	Yes	–	Mac, Windows, Linux
Gitleaks	Free	Yes	–	Mac, Windows, Linux
ZAP	Free	Yes	–	Mac, Windows, Linux
Rancher Desktop	Free	Yes	–	Mac, Windows, Linux

Similar to Trivy

Snyk

Developer security for code, dependencies and containers

Snyk finds and helps fix vulnerabilities in code, open-source dependencies, containers and infrastructure as code.

Free plan · Web, API · Website ↗

Nuclei

Template-based vulnerability scanner

Nuclei, from ProjectDiscovery, runs community YAML templates to detect vulnerabilities across web apps, networks and cloud.

Free · Mac, Windows, Linux · Website ↗

TruffleHog

Find, verify and analyze leaked credentials

TruffleHog scans repos, cloud storage and chat tools for secrets and checks whether found credentials are live.

Free plan · Mac, Windows, Linux · Website ↗

Gitleaks

Find secrets in Git repositories

Gitleaks is an open-source tool that detects passwords, API keys and tokens in Git history and files.

Free · Mac, Windows, Linux · Website ↗

ZAP

Open-source web app security scanner

ZAP is a widely used open-source dynamic application security testing proxy for finding vulnerabilities in web apps.

Free · Mac, Windows, Linux · Website ↗

Rancher Desktop

Open-source Kubernetes and containers on the desktop

Rancher Desktop, from SUSE, provides local Kubernetes and container runtimes (containerd or Moby) with a GUI.

Free · Mac, Windows, Linux · Website ↗

Colima

Container runtimes on macOS and Linux with minimal setup

Colima runs Docker, containerd and Kubernetes in a lightweight Lima VM from the command line.

Free · Mac, Linux · Website ↗

Socket

Detect malicious and risky open-source dependencies

Socket analyzes npm, PyPI and other packages for supply-chain attacks and risky behavior before you install them.

Free plan · Web, API · Website ↗

Questions

Is Trivy free?

Trivy is free.

Is Trivy open source?

Yes, Trivy is open source.

What platforms does Trivy run on?

Trivy is available for Mac, Windows, Linux.

What are some alternatives to Trivy?

Similar indie products include Snyk, Nuclei, TruffleHog, Gitleaks and 4 more.

Is this your product? Submit an update.