For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
Mobile US PressList your app
Vendor dashboard

cfn-nag

No phone app

6.2No. 9 of 27
in Infrastructure Testing Tools
  • Recognised40% of the score20
  • Phone app26% of the score0
  • Documented20% of the score77
  • Free plan14% of the score100
Free plan
Yes
Runs on
Linux, Mac, self-hosted
Visit site Alternatives

Summary

cfn-nag is ranked #9 of 27 in infrastructure testing tools on Samsung Mobile US Press. It runs on Linux, macOS, Self-hosted. There is a free plan.

cfn-nag plans and pricing

All plans
cfn-nag Free MIT-licensed software · Ruby >= 2.5 github.com · 3 Oct 2026

Compared on infrastructure testing tools

Free plan
Yesgithub.com
Terraform analysis
Nogithub.com
Kubernetes analysis
Nogithub.com
CloudFormation analysis
Yesgithub.com
Custom policies
Yesgithub.com
Secrets detection
Yesgithub.com

Facts

Purpose
cfn-nag scans CloudFormation templates for patterns that may indicate insecure infrastructure.github.com · 3 Oct 2026
Checks
The project lists checks for overly permissive IAM and security group rules, disabled access logs or encryption, and password literals.github.com · 3 Oct 2026
Install
The project documents installation with RubyGems and Homebrew, and requires Ruby 2.5 or later for gem installation.github.com · 3 Oct 2026
Template inputs
The scanner processes JSON, .template, YAML, and YML files and recursively scans subdirectories when given a directory.github.com · 3 Oct 2026
Output
Results go to standard output; JSON output is available, and failures return a non-zero exit code while warnings return success.github.com · 3 Oct 2026
Docker
A Dockerfile is provided, and the project says its image is published as stelligent/cfn_nag on Docker Hub.github.com · 3 Oct 2026
Integrations
The project documents running cfn-nag in GitHub Actions workflows and deploying it in AWS CodePipeline through the AWS Serverless Application Repository.github.com · 3 Oct 2026
Rule customization
Users can filter checks with profiles and deny lists, suppress rules per resource, and develop custom rules distributed as gems or loaded from S3.github.com · 3 Oct 2026
Template analysis limit
Static analysis cannot see parameter values supplied at deployment unless users provide those values through a JSON file.github.com · 3 Oct 2026
Conditional analysis limit
By default, cfn-nag substitutes the true outcome for Fn::If, so rules do not inspect false outcomes unless condition values are provided.github.com · 3 Oct 2026
Offline use
The gem specification describes cfn-nag as a static analysis tool that must work without network connectivity, while noting S3 rule retrieval is optional.github.com · 3 Oct 2026
License
The project uses the MIT License, which grants permission to use, copy, modify, merge, publish, distribute, sublicense, and sell the software subject to its terms.github.com · 3 Oct 2026
Support
The project directs users to submit bug reports and feature requests through its GitHub issue tracker.github.com · 3 Oct 2026

Best cfn-nag alternatives

See all 12
Conftest No. 1 6.4 No phone appFreeTerratest No. 2 6.4 No phone appFreecfn-lint No. 3 6.3 No phone appFreeCinc Auditor No. 4 6.3 No phone appFreeterraform-plugin-testing No. 5 6.3 No phone appFreeTest Kitchen No. 6 6.3 No phone appFree

Where it ranks on Samsung Mobile US Press

Is cfn-nag yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote cfn-nag

Sources