Terrascan
A static code analyzer that detects security and compliance violations in Infrastructure as Code before provisioning cloud infrastructure.
What is Terrascan?
Terrascan is a static code analyzer designed to detect security vulnerabilities, compliance violations, and misconfigurations in Infrastructure as Code (IaC) before provisioning cloud-native infrastructure. It scans various IaC formats like Terraform, Kubernetes manifests, and Dockerfiles to mitigate risks early in the development process. The tool helps prevent posture drift by monitoring provisioned infrastructure for configuration changes.
Cloud engineers, DevOps teams, and security professionals who manage infrastructure as code and need to enforce security best practices across Terraform, Kubernetes, and other IaC technologies.
Developers choose Terrascan for its extensive policy library (500+ policies), support for multiple IaC providers and cloud platforms, and seamless integration into CI/CD pipelines. Its ability to scan for both configuration issues and container vulnerabilities in a single tool provides a comprehensive security solution.
Overview
Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.
Use Cases
Best For
- Scanning Terraform configurations for AWS security misconfigurations
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
