Browse & filter

Filter by platform, license text, maturity, maintenance cadence, and editorial tags like privacy-focused or self-hosted. Search matches names, summaries, tags, and use cases.

Trivy

Top pick

All-in-one scanner for container images, IaC, Kubernetes manifests, SBOMs, and VM OS packages with CI integrations.

devsecopscontainersiacvulnerabilityscanner

Security & Privacy

Grype

Also strong

Vulnerability scanner for container images and filesystems using Anchore’s vulnerability DB and Syft SBOM input.

vulnerabilitycontainerssbomci

Security & Privacy

Dependency-Track

Also strong

Continuous SBOM analysis platform tracking component vulnerabilities, policies, and audit trails for supply chain risk.

sbomsupply-chainowaspvulnerabilityself-hosted

Security & Privacy

Clair

Also strong

Static analysis engine for container images: layer indexing and vulnerability matching against NVD and distro feeds.

containersregistryvulnerabilityscanner