Infrastructure-as-Code security scanning. Detects misconfigurations in Terraform, Kubernetes, Docker, CloudFormation, Ansible, and Helm charts.

Supported Platforms

Terraform (HCL)

Kubernetes (YAML)

Docker / Dockerfile

AWS CloudFormation

Ansible Playbooks

Helm Charts

Detection Rules

Public S3 buckets / storage

Privileged containers

Open security groups (0.0.0.0/0)

Unencrypted resources

Hardcoded credentials

Root user containers

Missing resource limits

Host network/PID access

Compliance

CIS Benchmarks

SOC 2 Controls

NIST 800-53

PCI DSS

HIPAA Security Rule