Trivy
trivy.dev ↗Open sourceSelf-hostable
Scanner for vulnerabilities and misconfigurations in code and containers.
CategorySecurity
PricingFree, open source
Self-hostableYes
Repositoryaquasecurity/trivy
LicenseApache-2.0
LanguageGo
Last activityOct 2026Active
Repository
From GitHub · updated Oct 23
Stars39k
Forks793
Open issues279
Last pushOct 2026
Related reading
Alternatives to Trivy
Open source alternatives
Gitleaks★ 30k
Detect and prevent hardcoded secrets in git repositories.
Open source
BunkerWeb★ 11k
Open-source web application firewall built on NGINX, for Docker, Kubernetes and Linux.
Open source
Falco★ 9.5k
Cloud native runtime security and threat detection.
Open source
checkov★ 9.1k
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages.
Open source
Kyverno★ 8.3k
Policy engine designed for Kubernetes.
Open source
Darkmoon★ 1.1k
Open source autonomous AI penetration testing platform that orchestrates 80+ offensive tools via Markdown playbooks with a proof trail per finding.
Open source
