Best Cloud Vulnerability Scanners in 2026
Updated
In short: Trivy is ranked #1 of 24 as of 4 October 2026, ahead of Cy5 Cloud-Native Vulnerability Management and Intruder. The best-ranked option with a free plan is Cy5 Cloud-Native Vulnerability Management. The lowest first paid tier on this page is Alibaba Cloud Security Center at $1/mo.
Assessing cloud security starts with the environments and workloads you need to examine. The ranked entries begin with Cy5 Cloud-Native Vulnerability Management and Intruder, followed by Kubescape and Mondoo CSPM. Compare cloud platform coverage and deployment model with workload scanning and IaC scanning to see which areas each entry addresses. Identity analysis and attack path analysis add other lenses for reviewing findings. Prowler Cloud, Qualys TotalCloud, and RapidFort are also among the first entries. Free-plan availability and paid-from pricing provide further context as you compare. Use these criteria to consider the scanning scope and deployment approach that align with your cloud environment.
24 cloud vulnerability scanners ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
Recognised 40% · Phone app 26% · Documented 20% · Free plan 14% of the score
- 1 Trivy No phone app RecognisedPhone appDocumentedFree plan 6.4Free
- 2 Cy5 Cloud-Native Vulnerability Management No phone app RecognisedPhone appDocumentedFree plan 6.3Free Cloud platforms: AWS, Azure, GCPWorkload scanning: Yes
- 3 Intruder No phone app RecognisedPhone appDocumentedFree plan 6.3Free
- 4 Kubescape No phone app RecognisedPhone appDocumentedFree plan 6.3Free
- 5 Mondoo CSPM No phone app RecognisedPhone appDocumentedFree plan 6.3Free IaC scanning: Yes
- 6 Prowler Cloud No phone app RecognisedPhone appDocumentedFree plan 6.3$99/mo IaC scanning: Yes
- 7 Qualys TotalCloud No phone app RecognisedPhone appDocumentedFree plan 6.3Free Cloud platforms: AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure
- 8 RapidFort No phone app RecognisedPhone appDocumentedFree plan 6.3Free
- 9 ZeusCloud No phone app RecognisedPhone appDocumentedFree plan 6.3Free Cloud platforms: AWS
- 10 Grype No phone app RecognisedPhone appDocumentedFree plan 6.2Free
- 11 OpenCNAPP No phone app RecognisedPhone appDocumentedFree plan 5.8
- 12 AccuKnox No phone app RecognisedPhone appDocumentedFree plan 5.7 Cloud platforms: AWS; Azure; GCP; Oracle; OpenStack; OpenShift; Nutanix; VMware; IBM Cloud; DigitalOcean; Alibaba Cloud
- 13 Alibaba Cloud Security Center No phone app RecognisedPhone appDocumentedFree plan 5.6$1/mo Cloud platforms: Alibaba Cloud, AWS, Azure, Huawei Cloud, Tencent Cloud, Volcano EngineWorkload scanning: Yes
- 14 Astra Security No phone app RecognisedPhone appDocumentedFree plan 5.6$58.25/mo
- 15 Cyscale CSPM No phone app RecognisedPhone appDocumentedFree plan 5.5$850/mo IaC scanning: Yes
- 16 Tenable One Cloud Security No phone app RecognisedPhone appDocumentedFree plan 5.5 IaC scanning: Yes
- 17 Tencent Cloud CDN No phone app RecognisedPhone appDocumentedFree plan 5.5CNY 21/mo Cloud platforms: Tencent Cloud and other cloud platformsWorkload scanning: YesIaC scanning: Yes
- 18 Google Artifact Analysis No phone app RecognisedPhone appDocumentedFree plan 5.4
- 19 SUSE Multi-Linux Manager No phone app RecognisedPhone appDocumentedFree plan 5.4
- 20 Tencent Cloud Security Center No phone app RecognisedPhone appDocumentedFree plan 5.4 Cloud platforms: Tencent Cloud and other cloud platformsWorkload scanning: YesIaC scanning: Yes
- 21 Holm Security Cloud Security No phone app RecognisedPhone appDocumentedFree plan 5.3 Cloud platforms: AWS, Microsoft Azure, Microsoft 365, Google Cloud, Oracle Cloud
- 22 Onam Security API Security No phone app RecognisedPhone appDocumentedFree plan 5.1
- 23 Anchore Enterprise No phone app RecognisedPhone appDocumentedFree plan 4.9
- 24 Amazon Inspector No phone app RecognisedPhone appDocumentedFree plan 4.7
Is your app on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which cloud vulnerability scanner is ranked first on Samsung Mobile US Press?
Trivy is ranked #1 of 24 with a score of 6.4. Cy5 Cloud-Native Vulnerability Management is second and Intruder third.
How many of these have a free plan?
10 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Alibaba Cloud Security Center has the lowest first paid tier we found: $1/mo.
How is this list ranked?
Ranked mobile-first: a phone app alongside the web or desktop product, a free tier and the depth of its documentation. Paid placements never change a rank.