A vulnerability scanner for container images and filesystems
☆12,594Jul 17, 2026Updated this week
Alternatives and similar repositories for grype
Users that are interested in grype are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆9,256Updated this week
- Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more☆36,976Updated this week
- Code signing and transparency for containers and binaries☆6,144Updated this week
- Vulnerability Static Analysis for Containers☆11,028Updated this week
- Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security…☆11,540Updated this week
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Find secrets with Gitleaks 🔑☆28,203Updated this week
- Cloud Native Runtime Security☆9,169Updated this week
- Vulnerability scanner written in Go which uses the data provided by https://osv.dev☆10,669Updated this week
- eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by A…☆12,005Updated this week
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆8,108Updated this week
- Find, verify, and analyze leaked credentials☆27,112Updated this week
- A tool for exploring each layer in a docker image☆54,330Dec 15, 2025Updated 7 months ago
- Tfsec is now part of Trivy☆7,023Mar 25, 2026Updated 3 months ago
- Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source pa…☆8,875Jul 12, 2026Updated last week
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Simple and flexible tool for managing secrets☆22,541Updated this week
- Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabl…☆29,835Updated this week
- Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.☆5,213Nov 20, 2025Updated 7 months ago
- Automation engine to build, test and ship any codebase. Runs locally, in CI, or directly in the cloud☆16,076Updated this week
- eBPF-based Networking, Security, and Observability☆24,744Updated this week
- Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.☆15,952Updated this week
- Unified Policy as Code☆7,940Updated this week
- Hunt for security weaknesses in Kubernetes clusters☆5,069Mar 19, 2024Updated 2 years ago
- Work with remote images registries - retrieving information, images, signing content☆11,078Updated this week
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- OpenSSF Scorecard - Security health metrics for Open Source☆5,586Updated this week
- Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it …☆23,342Jun 23, 2026Updated 3 weeks ago
- Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud envir…☆14,276Updated this week
- The easiest, and most secure way to access and protect all of your infrastructure.☆20,663Updated this week
- 🥑 Language focused docker images, minus the operating system.☆22,847Updated this week
- Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supp…☆4,022Updated this week
- Cost monitoring for Kubernetes workloads and cloud costs☆6,645Updated this week
- eBPF-based Security Observability and Runtime Enforcement☆4,843Updated this week
- ZITADEL - Identity infrastructure, simplified for you.☆14,461Updated this week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- OpenClarity is an open source platform built to enhance security and observability of cloud native applications and infrastructure☆1,462May 25, 2026Updated last month
- Linux Runtime Security and Forensics using eBPF☆4,551Updated this week
- Build Container Images In Kubernetes☆15,786Jun 3, 2025Updated last year
- Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.☆16,207Updated this week
- Build and deploy Go applications☆8,479Updated this week
- A simple, modern and secure encryption tool (and Go library) with small explicit keys, no config options, and UNIX-style composability.☆22,918Mar 20, 2026Updated 3 months ago
- Dockerfile linter, validate inline bash, written in Haskell☆12,303Updated this week