Saturday, October 24, 2026 4,350 lists 78,096 records on file
List your app or device

  1. Home
  2. IT & Infrastructure
  3. Cloud Vulnerability Scanners
Ranked on the record · 28 apps

Best Cloud Vulnerability Scanners 2026

Cloud vulnerability scanners help you examine security exposure across cloud environments, but their coverage and deployment options vary. Compared on cloud platforms and deployment model, the entries also distinguish attack path and identity analysis, infrastructure-as-code scanning, and workload scanning. Free-plan availability and paid-from pricing give you cost details to weigh alongside that scope. Qualys TotalCloud, Mondoo CSPM, and Intruder are among the products to compare; Prowler Cloud and Tenable One Cloud Security add further options. Consider which environments your team uses and which kinds of risks you need a scanner to help assess.

01

Kubescape suits teams that operate Kubernetes clusters and need configuration, vulnerability, compliance, or runtime security checks.

Free plan Open source From $30 a month WindowsMacLinuxAPISelf-hosted
03

Onam Security API Security

It suits teams seeking visibility into exposed, unauthenticated, or unmonitored APIs across cloud environments.

WebWindowsMac+3
Record5.6 Visit
04

Grype

Grype suits developers and security teams checking container images, filesystems, SBOMs, or specific dependencies.

WindowsMacLinux+1
Record5.4 Visit
05

Prowler Cloud

It suits teams in startups, mid-sized businesses, and large enterprises that need cloud risk visibility and compliance monitoring.

WebLinuxAPI+1
Record5.4 Visit
6 WebWindowsMac+2 Free plan Record5.3 Visit
7
Mondoo CSPM

Mondoo CSPM suits teams managing security posture across AWS, Azure, and Google Cloud.

WebWindowsMac+3 Free plan Record5.3 Visit
8
Astra Security

Astra suits engineering, security, and DevOps teams testing web applications, APIs, and cloud environments.

WebAPI $699 a year Record4.9 Visit
9
Trivy

Trivy suits teams and developers who need to scan code, artifacts, container images, or Kubernetes environments.

WindowsMacLinux+1 Free plan Record4.9 Visit
10
RapidFort

RapidFort is aimed at security, DevSecOps, and procurement teams managing containerized software.

WebLinuxSelf-hosted Free plan Record4.7 Visit
11
Cy5 Cloud-Native Vulnerability Management

Cy5 describes ion as a cloud-native application protection platform for Indian fintechs and telecoms.

Web Free plan Record4.5 Visit
12 WebAPI $850 a month, billed yearly Record4.5 Visit
13
Qualys TotalCloud

TotalCloud suits organizations managing security across multiple cloud providers, containers, and SaaS applications.

WebAPI — Record4.5 Visit
14
AccuKnox

AccuKnox suits teams seeking security controls across cloud, application, API, and kernel layers, including organizations with on-premise or air-gapped deployment needs.

WebLinuxSelf-hosted Free plan Record4.3 Visit
15 WebMacLinux+1 — Record4.3 Visit
16
ZeusCloud

ZeusCloud suits teams that want to inventory AWS assets, examine IAM access, and prioritize cloud security findings.

WebSelf-hosted Free plan Record4.3 Visit
17 WebAPI — Record4.2 Visit
18
Anchore Enterprise

Anchore describes the product for large enterprises and government agencies handling software composition analysis, SBOM management, vulnerability scanning, and…

WebLinuxAPI+1 — Record4.2 Visit
19
OpenCNAPP

OpenCNAPP may suit teams responsible for cloud, Kubernetes, container, or code security across build and runtime.

Self-hosted Free plan Record4.1 Visit
20
Holm Security Cloud Security

It suits organizations of different sizes, including small teams, growing enterprises, and partners.

WebAPI — Record4.0 Visit
21 Web $1 a month Record3.8 Visit
22
Tenable One Cloud Security

It suits organizations securing cloud resources, identities, and exposure across multi-cloud or hybrid environments.

Web — Record3.7 Visit
23 WebWindowsLinux $10 a month, billed yearly Record3.3 Visit
24 Web — Record3.0 Visit
25 Web Free plan Record2.8 Visit