O3 Security Image Scanner

Plans and prices

Every plan, in full

On the record

Data protection

O3 states that data in transit uses TLS 1.3, data at rest uses AES-256, and production access is restricted, logged, and reviewed.o3.security · read 1 Oct 2026

Deployment

O3 states that it offers self-hosted deployment inside a customer VPC or air-gapped environment with no outbound telemetry required.o3.security · read 1 Oct 2026

Image formats

The scanner works with Docker, OCI, and distroless images.o3.security · read 1 Oct 2026

Integrations

O3 lists more than 30 native integrations across CI/CD, code editors, package managers, cloud, ticketing, and registries.o3.security · read 1 Oct 2026

Layer inspection

O3 decomposes and inspects every image layer, including OS packages, application code, credentials, and layer changes.o3.security · read 1 Oct 2026

Malware detection

O3 compares added binaries against known-good hashes and detects malicious signatures, unexpected cron jobs, startup scripts, and obfuscated shell scripts.o3.security · read 1 Oct 2026

Promotion blocking

The registry integration can block promotion to a production registry when critical findings are present.o3.security · read 1 Oct 2026

Purpose

O3 scans container images for OS vulnerabilities, malicious layers, embedded secrets, and misconfigured permissions before registry push.o3.security · read 1 Oct 2026

Registry integrations

The image scanner integrates with Amazon ECR, Google GCR and Artifact Registry, Azure ACR, Docker Hub, and private registries using Docker Registry API v2.o3.security · read 1 Oct 2026

Registry scanning

Images can be scanned on push, on pull through a scanning proxy, or on a recurring schedule.o3.security · read 1 Oct 2026

SBOM output

Each scan generates SBOM output in CycloneDX and SPDX formats.o3.security · read 1 Oct 2026

Secret detection

O3 detects secrets that remain in earlier layers even after later deletion, including API keys, database credentials, and private keys.o3.security · read 1 Oct 2026

Security certifications

O3 states that it is SOC 2 Type II and ISO 27001 certified, with audit reports available on request under NDA.o3.security · read 1 Oct 2026

Vulnerability intelligence

O3 matches packages against NVD, OSV, and distribution-specific advisories and reports CVSS, exploitability, fix version, and introducing layer.o3.security · read 1 Oct 2026

Alternatives to O3 Security Image Scanner

G GrypeWindowsMac+2 MC Mondoo CSPMWebWindows+4 AC Alibaba Cloud Container RegistryWebWindows+2 T TrivyWindowsMac+2 R RapidFortWebLinux+1 UC Uptycs Container SecurityWebLinux+2 SS Sysdig SecureWebWindows+4 C ClairLinuxAPI+1

Every alternative, ranked