KICS
KICS is an open-source static analysis tool that finds security vulnerabilities, compliance issues, and misconfigurations in Infrastructure as Code.
What is KICS?
KICS is an open-source static analysis tool that scans Infrastructure as Code files for security vulnerabilities, compliance issues, and infrastructure misconfigurations. It helps developers identify and fix problems early in the development cycle, preventing insecure configurations from reaching production environments.
DevOps engineers, cloud architects, and security teams who manage infrastructure using Terraform, Kubernetes, CloudFormation, or other IaC frameworks and need to enforce security and compliance standards.
Developers choose KICS because it supports a wide range of IaC platforms, integrates easily into CI/CD pipelines, and is fully extensible with customizable queries, all while being open-source and free to use.
Overview
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Use Cases
Best For
- Scanning Terraform configurations for security misconfigurations before deployment
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
