kube-hunter
Automated security weakness hunting and vulnerability exploitation for Kubernetes clusters.
Open Source
View Pricing
Vulnerability Discovery
Network Probing
Kubernetes Exploitation Analysis
tfsec
4.6
Free tfsec is highly regarded for its accuracy, ease of use, and comprehensive rule set.
Static analysis security scanner for your Terraform code.
0 views
0 saves
|
Refined 3/4/2026
About tfsec
tfsec is a static analysis security scanner specifically designed for Terraform code. It analyzes Terraform configurations to identify potential security vulnerabilities and misconfigurations before infrastructure is provisioned. By integrating tfsec into the CI/CD pipeline, organizations can proactively prevent common security issues related to cloud infrastructure. It works by parsing the Terraform code, evaluating resource configurations against a comprehensive rule set, and reporting any violations found. tfsec supports a wide range of cloud providers, including AWS, Azure, and GCP. The value proposition lies in its ability to shift security left, reducing the risk of deploying vulnerable infrastructure and minimizing potential security incidents. The use cases include identifying overly permissive security group rules, ensuring encryption is enabled on storage buckets, and enforcing compliance with security best practices.
Core Capabilities
tfsec is a static analysis security scanner specifically designed for Terraform code.
Main Tasks
Parse Terraform Configuration
Explore all tools that specialize in parse terraform configuration. This domain focus ensures tfsec delivers optimized results for this specific requirement.
