The best Checkov alternatives
The rest of Best Infrastructure Testing Tools, in this site's order: each with what it costs, where it runs and its record score.
Chef InSpec suits teams that express compliance, security, or policy checks as code and need to assess infrastructure locally or in cloud…
CloudFormation may suit teams managing AWS infrastructure through templates, including CI/CD workflows and deployments spanning accounts or Regions.
It suits organizations assessing internal systems against CIS guidance across Windows, Linux, macOS, cloud, or supported Microsoft 365 environments.
Test Kitchen suits infrastructure developers who want to provision isolated environments and verify infrastructure code.
kube-score suits Kubernetes users who want static checks on object definitions, including teams incorporating checks into CI/CD.
Conftest suits teams that need to check structured configuration as part of CI, including users working with Kubernetes or Terraform.
KICS suits developers and security teams working with Infrastructure as Code across supported formats.
OpenSCAP is aimed at government agencies and contractors, businesses, and the open-source community.
Cinc Auditor suits teams that need InSpec-compatible compliance checks locally or in CI across Linux, macOS, and Windows.
Serverspec may suit infrastructure teams who want RSpec tests for server configuration and checks alongside configuration-management tools.
cfn-lint is for people validating AWS CloudFormation templates, including those working with AWS SAM.
Kubeconform suits users who want a local command-line check for Kubernetes manifests, including teams using GitHub Actions or GitLab CI.
It suits developers and platform teams checking Kubernetes configuration against security and readiness policies.
TFLint suits Terraform users who want local checks for language rules, cloud-specific issues, and naming practices.
cfn-nag is for teams checking AWS CloudFormation templates for specified security-related patterns.
This module is for Go developers testing Terraform providers with unit or acceptance tests.
Terratest suits teams that want to automate checks for infrastructure code built with tools such as Terraform, Packer, Docker or Kubernetes.
terraform-compliance suits developers and security teams writing readable Terraform policy checks.