📋 IaC Testing

Kubescape

The first open-source tool for testing if Kubernetes is deployed securely.

An open-source Kubernetes security platform for risk analysis, security compliance, and misconfiguration scanning.

For more tool information ➜

ControlMonkey

The IaC-native Cloud Governance Platform.

A platform that discovers, codifies, and automates cloud infrastructure using existing IaC tools.

For more tool information ➜

Infracost

Cloud cost estimates for Terraform in pull requests. Shift FinOps Left!

A tool that shows cloud cost estimates for IaC changes, helping engineers understand the cost impact of their work.

For more tool information ➜

Infracost

Cloud cost estimates for Terraform in pull requests. See cost breakdowns and get visibility into how changes impact your monthly bill.

A tool that shows cloud cost estimates for IaC changes, integrating into CI/CD pipelines.

For more tool information ➜

Scalr

The Terraform Automation and Collaboration Platform.

A Terraform automation platform that provides a hierarchical structure for managing environments, credentials, and variables.

For more tool information ➜

Spacelift

The most flexible CI/CD for Infrastructure as Code.

A specialized CI/CD platform for IaC that includes a powerful Policy as Code framework using OPA.

For more tool information ➜

Infracost

Cloud cost estimates for Terraform in pull requests.

A tool that shows cloud cost estimates for infrastructure changes before they happen, integrating with CI/CD.

For more tool information ➜

env0

The complete Infrastructure as Code (IaC) platform to manage all your cloud environments.

An automated, collaborative platform for managing Terraform, Terragrunt, and other IaC frameworks.

For more tool information ➜

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

An open-source, general-purpose policy engine that unifies policy enforcement across the stack.

For more tool information ➜

env0

The complete Infrastructure as Code Platform.

An automation platform for IaC that enables self-service, governance, and cost management for Terraform and Terragrunt.

For more tool information ➜

Spacelift

The most flexible and sophisticated CI/CD for Infrastructure as Code.

A specialized CI/CD platform for IaC that provides collaboration, control, and automation for Terraform, Pulumi, and more.

For more tool information ➜

env0

The complete infrastructure as code (IaC) platform to manage all your cloud environments.

An IaC automation platform that provides governance, cost management, and self-service capabilities for Terraform, Terragrunt, and other IaC tools.

For more tool information ➜

Spacelift

The most flexible CI/CD for Infrastructure as Code.

A specialized CI/CD and management platform for Terraform, Pulumi, and other IaC tools, with a focus on policy and collaboration.

For more tool information ➜

env0

Automate and manage your IaC deployments with governance and cost control.

An automation platform for managing IaC environments, focusing on governance, cost management, and collaboration.

For more tool information ➜

Kubescape

The first tool for testing if Kubernetes is deployed securely according to multiple frameworks.

An open-source Kubernetes security posture management tool that scans for misconfigurations and vulnerabilities.

For more tool information ➜

Datree

Prevent misconfigurations from reaching production.

A CLI tool for preventing misconfigurations in Kubernetes manifests by running automated checks.

For more tool information ➜

Datree

Prevent Kubernetes misconfigurations from reaching production.

A CLI tool that runs automated checks on Kubernetes configuration files to ensure they follow policies and best practices.

For more tool information ➜

Spacelift

The most flexible and compliant CI/CD for Infrastructure as Code.

A specialized CI/CD platform for IaC that provides drift detection, policy enforcement, and workflow automation.

For more tool information ➜

CloudQuery

The open-source cloud asset inventory powered by SQL.

An open-source tool that extracts, transforms, and loads cloud asset data into SQL databases for analysis.

For more tool information ➜

env0

The complete infrastructure as code (IaC) platform to manage all of your cloud environments.

An automation platform for IaC that includes policy-as-code and cost management features.

For more tool information ➜

Styra DAS

The Unified Authorization Platform, built on Open Policy Agent.

An enterprise management plane for Open Policy Agent (OPA) that helps operationalize policy as code.

For more tool information ➜

Infracost

Cloud cost estimates for Terraform in pull requests.

A CLI tool and API that shows cloud cost estimates for Terraform projects, helping developers see the cost impact of their changes.

For more tool information ➜

Kyverno

Kubernetes Native Policy Management.

A policy engine designed specifically for Kubernetes, allowing policies to be managed as Kubernetes resources.

For more tool information ➜

Snyk IaC

Find and fix security issues in your Terraform, CloudFormation, Kubernetes, and Azure Resource Manager configurations.

An IaC security tool that finds and fixes misconfigurations in cloud native application infrastructure.

For more tool information ➜

Scalr

The Terraform Automation & Collaboration Platform.

A Terraform automation and collaboration platform with built-in policy-as-code and governance features.

For more tool information ➜

Scalr

The Terraform Automation & Collaboration Software.

A Terraform automation and collaboration platform with a hierarchical model for policy and workspace management.

For more tool information ➜

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

An open-source, general-purpose policy engine that can be used to enforce policies on Terraform plans.

For more tool information ➜

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

An open-source, general-purpose policy engine that can be used for enforcing policies on IaC.

For more tool information ➜

Scalr

The Terraform Automation & Collaboration Software.

A Terraform automation and collaboration platform with a focus on hierarchical configuration and environment management.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build-time.

An open-source static analysis tool for scanning Infrastructure as Code (IaC) files for misconfigurations.

For more tool information ➜

Open Policy Agent (OPA)

An open source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack.

A general-purpose policy engine that can be used for a wide range of policy enforcement use cases.

For more tool information ➜

Wiz

The Cloud Security Platform.

A comprehensive CNAPP that includes IaC scanning as part of its cloud security solution.

For more tool information ➜

Wiz

The Cloud Security Platform.

A comprehensive cloud security platform that includes IaC scanning as part of its broader capabilities.

For more tool information ➜

Firefly

The Cloud Asset Management Platform.

A platform for managing cloud assets, discovering resources, and codifying infrastructure.

For more tool information ➜

Snyk IaC

Find and fix security issues in your Terraform, CloudFormation, Kubernetes & ARM templates.

A developer-focused security tool that scans IaC files for misconfigurations and provides context and remediation advice.

For more tool information ➜

Trivy

A comprehensive and versatile security scanner.

A versatile security scanner that finds vulnerabilities, IaC misconfigurations, and secrets in various targets.

For more tool information ➜

Orca Security

The Cloud Security Platform You Can Actually Use.

An agentless CNAPP that provides security and compliance across the full cloud-native application lifecycle, including IaC scanning.

For more tool information ➜

Orca Security

The Cloud Security Platform You Can Actually Use.

An agentless cloud security platform that includes shift-left capabilities like IaC security scanning.

For more tool information ➜

Datadog Cloud Security Management

Unify development, operations, and security in a single platform.

A cloud security platform that includes IaC scanning, posture management (CSPM), and workload security (CWS).

For more tool information ➜

Terraform Cloud

Automate your infrastructure on any cloud.

The official managed service from HashiCorp for running Terraform, providing collaboration, governance, and automation features.

For more tool information ➜

Snyk Infrastructure as Code

Developer security that finds and fixes security vulnerabilities in your code, open source dependencies, containers, and IaC.

A developer-first security tool that scans IaC files for misconfigurations and security issues.

For more tool information ➜

Prisma Cloud (by Palo Alto Networks)

The industry’s most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive CNAPP that includes IaC scanning, cloud security posture management, and workload protection.

For more tool information ➜

Terraform Cloud

Provision, manage, and connect infrastructure as code.

HashiCorp's managed service for using Terraform in production, providing collaboration and governance features.

For more tool information ➜

Snyk IaC

Secure your infrastructure as code from commit to cloud.

A developer-first security tool that finds and fixes misconfigurations in IaC files.

For more tool information ➜

Snyk IaC

Find and fix security issues in your Terraform, CloudFormation, Kubernetes, and Azure Resource Manager configurations.

A developer-focused IaC security tool that finds and helps fix misconfigurations in code.

For more tool information ➜

tfsec

A static analysis security scanner for your Terraform code.

An open-source static analysis tool for finding security misconfigurations in Terraform code.

For more tool information ➜

tfsec

Security scanner for your Terraform code.

An open-source static analysis tool that checks Terraform code for security misconfigurations and compliance violations.

For more tool information ➜

SonarQube

The essential tool for Code Quality and Code Security.

A leading static analysis platform that supports IaC scanning for Terraform, CloudFormation, Kubernetes, and more.

For more tool information ➜

Checkov

Policy-as-code for everyone.

An open-source static analysis tool for scanning IaC for misconfigurations.

For more tool information ➜

HashiCorp Sentinel

Policy as Code for Security, Compliance, and Operational Governance.

A policy as code framework from HashiCorp that integrates with its Enterprise products.

For more tool information ➜

Terraform Cloud

Automate your infrastructure with Terraform.

HashiCorp's managed service offering for using Terraform in production.

For more tool information ➜

Snyk Infrastructure as Code

Find and fix security issues in your Terraform, CloudFormation, Kubernetes, and ARM templates.

A developer-focused tool for finding and fixing security misconfigurations in IaC files.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk.

An open-source static code analyzer for IaC that helps detect security vulnerabilities and compliance violations.

For more tool information ➜

TFLint

A Pluggable Terraform Linter.

A linter focused on finding possible errors, best practice deviations, and enforcing naming conventions in Terraform code.

For more tool information ➜

Trivy

All-in-one, comprehensive security scanner.

A versatile security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOMs in containers, IaC, and more.

For more tool information ➜

Azure Policy

Implement governance for consistency, compliance, and security.

A service in Azure that you use to create, assign, and manage policies for your Azure resources.

For more tool information ➜

Lacework

The data-driven cloud security platform.

A CNAPP that uses anomaly detection to secure cloud environments, with IaC security features to shift left.

For more tool information ➜

Prisma Cloud (Bridgecrew)

The industry’s most complete Cloud-Native Application Protection Platform (CNAPP).

A comprehensive cloud security platform that includes IaC scanning, drift detection, and compliance monitoring.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build time.

An open-source static analysis tool for scanning infrastructure as code (IaC) files for misconfigurations.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

An open-source static code analyzer that scans IaC for security vulnerabilities and compliance violations.

For more tool information ➜

Trivy

The comprehensive, streamlined security scanner.

A comprehensive open-source security scanner for vulnerabilities, misconfigurations, secrets, and more.

For more tool information ➜

tfsec

Security scanner for your Terraform code.

An open-source static analysis tool for finding security misconfigurations in Terraform code.

For more tool information ➜

Pulumi CrossGuard

Policy as Code for the Modern Cloud.

A policy as code framework for the Pulumi IaC platform, allowing policies to be written in general-purpose languages.

For more tool information ➜

Datadog Cloud Security Management

Full-stack security, from development to production.

A security and compliance solution within the Datadog platform that includes IaC scanning.

For more tool information ➜

tfsec

tfsec uses static analysis of your Terraform templates to spot potential misconfigurations.

A static analysis security scanner for Terraform code to detect potential security misconfigurations.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

An open-source static code analysis tool for scanning IaC against security and compliance policies.

For more tool information ➜

Chef InSpec

Turn your compliance, security, and other policy requirements into code.

An open-source testing framework for infrastructure with a human-readable language for specifying compliance and security rules.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build-time for Terraform, CloudFormation, Kubernetes, Serverless framework and other infrastructure-as-code-languages.

An open-source static analysis tool for scanning IaC files for misconfigurations and security vulnerabilities.

For more tool information ➜

Chef InSpec

Turn your compliance, security, and other policy requirements into automated tests.

An open-source testing framework for infrastructure with a human-readable language for specifying compliance and security rules.

For more tool information ➜

Pulumi

Create, deploy, and manage infrastructure on any cloud using your favorite language.

An IaC platform that lets you use general-purpose programming languages to provision cloud infrastructure.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build-time with Checkov, the static analysis tool for infrastructure as code.

An open-source static analysis tool for scanning infrastructure as code (IaC) files for misconfigurations.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure.

An open-source static analysis tool that finds security vulnerabilities, compliance issues, and misconfigurations in IaC.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure.

An open-source IaC scanning tool by Checkmarx that finds security vulnerabilities, compliance issues, and misconfigurations.

For more tool information ➜

Checkov

Prevent cloud misconfigurations during build-time with Checkov, the static analysis tool for infrastructure as code.

An open-source static analysis tool for scanning infrastructure as code (IaC) files for misconfigurations.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning.

An open-source static code analyzer for IaC that helps detect security and compliance violations.

For more tool information ➜

Chef InSpec

Turn your compliance, security, and other policy requirements into code.

An open-source testing framework for infrastructure with a human-readable language for specifying compliance and security rules.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure

An open-source static analysis tool from Checkmarx that scans IaC for security vulnerabilities, compliance issues, and misconfigurations.

For more tool information ➜

Terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning.

An open-source static code analyzer for IaC that helps detect security and compliance violations.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure

An open-source static analysis tool that finds security vulnerabilities, compliance issues, and misconfigurations in IaC.

For more tool information ➜

cfn-lint

Validate CloudFormation templates against the AWS CloudFormation resource specification.

An open-source linter from AWS for validating CloudFormation templates.

For more tool information ➜

Terragrunt

A thin wrapper for Terraform that provides extra tools for keeping your configurations DRY, working with multiple Terraform modules, and managing remote state.

A wrapper for Terraform that helps manage complex infrastructure by keeping code DRY and managing remote state.

For more tool information ➜

Ansible Lint

Checks playbooks for practices and behavior that could potentially be improved.

A command-line tool for linting Ansible playbooks, roles, and collections.

For more tool information ➜

Terratest

The ultimate Go library for testing your infrastructure code.

A Go library that provides patterns and helper functions for writing automated tests for infrastructure code.

For more tool information ➜

Ansible Lint

Checks playbooks for practices and behavior that could potentially be improved.

A command-line tool for linting Ansible playbooks, roles, and collections.

For more tool information ➜

Terratest

Test your infrastructure code.

A Go library that provides patterns and helper functions for testing infrastructure, with first-class support for Terraform.

For more tool information ➜

cfn-lint

Validate CloudFormation yaml/json templates against the CloudFormation spec and additional checks.

An open-source linter from AWS for validating CloudFormation templates.

For more tool information ➜

Ansible Lint

Checks playbooks for practices and behavior that could potentially be improved.

A command-line tool for linting Ansible playbooks, roles, and collections.

For more tool information ➜

TFLint

A Pluggable Terraform Linter.

A linter for Terraform that focuses on best practices, style conventions, and detecting potential errors.

For more tool information ➜

Kyverno

Kubernetes Native Policy Management.

A policy engine designed specifically for Kubernetes, allowing you to manage and validate configurations as policies.

For more tool information ➜

Terratest

The ultimate testing library for infrastructure code.

A Go library that provides patterns and helper functions for writing automated tests for infrastructure code.

For more tool information ➜

Regula

Policy-as-Code for Terraform, CloudFormation, and Kubernetes.

A tool that evaluates IaC for security misconfigurations and compliance violations, powered by Open Policy Agent.

For more tool information ➜

Regula

A tool that evaluates infrastructure as code for security and compliance.

An open-source tool by Fugue (now Snyk) that checks IaC for misconfigurations using Rego.

For more tool information ➜

Conftest

Write tests against structured configuration data.

A utility to help you write tests against structured configuration files using the Rego language.

For more tool information ➜

TFLint

A Pluggable Terraform Linter.

A linter for Terraform that checks for errors, best practices, and naming conventions.

For more tool information ➜

tflint

A Pluggable Terraform Linter.

A linter for Terraform that focuses on checking for potential errors, best practices, and enforcing conventions.

For more tool information ➜

Atlantis

Terraform Automation By Pull Request

An open-source, self-hosted application for automating Terraform via pull requests, enabling a GitOps workflow.

For more tool information ➜

OPA Gatekeeper

Policy Controller for Kubernetes.

A Kubernetes-native admission controller that enforces policies created with Open Policy Agent (OPA).

For more tool information ➜

Terragrunt

A thin wrapper for Terraform that provides extra tools for keeping your configurations DRY, working with multiple Terraform modules, and managing remote state.

A CLI tool that acts as a thin wrapper on Terraform to help manage complex projects by keeping code DRY and managing remote state.

For more tool information ➜

driftctl

The open-source tool for infrastructure drift detection.

A CLI tool that scans cloud environments, compares them to your IaC state, and reports any unmanaged resources or drift.

For more tool information ➜

Kubeval

Validate your Kubernetes configuration files.

A tool for validating Kubernetes configuration files against the official Kubernetes OpenAPI schemas.

For more tool information ➜

Regula

Check infrastructure as code for security and compliance.

An open-source tool that evaluates Terraform and CloudFormation for security misconfigurations and compliance with standards like CIS.

For more tool information ➜

conftest

Write tests against structured configuration data.

A utility that uses the Rego language from Open Policy Agent to write tests against configuration files, including Terraform.

For more tool information ➜

kitchen-terraform

Test Kitchen plugins for testing Terraform configurations.

A set of plugins for the Test Kitchen framework that enables integration and acceptance testing of Terraform code.

For more tool information ➜

Terratag

A CLI tool to manage tags on Terraform resources.

An open-source CLI tool from env0 that helps manage and apply tags to all resources within a Terraform project.

For more tool information ➜

Yor

Automated IaC tagging for traceability.

An open-source tool that automatically adds tags to IaC files, enriching them with context like git repository and commit details.

For more tool information ➜

Kube-score

A tool that performs static code analysis of your Kubernetes object definitions.

A static analysis tool for Kubernetes that checks manifests for reliability and security best practices.

For more tool information ➜

Terratest

The ultimate Go library for testing your infrastructure code.

A Go library that provides patterns and helper functions for writing automated tests for infrastructure code.

For more tool information ➜

AWS CloudFormation Guard

A command-line interface (CLI) that provides a policy-as-code language to define rules that can check for both required and prohibited resource configurations.

An open-source policy as code tool for checking compliance of AWS CloudFormation templates and other structured data.

For more tool information ➜

KICS

Keeping Infrastructure as Code Secure.

An open-source solution for static analysis of IaC, finding security vulnerabilities, compliance issues, and misconfigurations.

For more tool information ➜

tfsec

Security scanner for your Terraform code.

An open-source static analysis tool that scans Terraform templates for security misconfigurations.

For more tool information ➜

Open Policy Agent (OPA)

Policy-based control for cloud native environments.

An open-source, general-purpose policy engine that can be used to enforce policies on IaC.

For more tool information ➜

Regula

A tool that evaluates infrastructure as code for security misconfigurations and compliance violations.

An open-source tool that checks Terraform and CloudFormation templates for compliance with controls from frameworks like CIS.

For more tool information ➜

cfn-lint

Validate CloudFormation templates against the AWS CloudFormation Resource Specification.

An AWS-supported open-source tool for linting and validating AWS CloudFormation templates.

For more tool information ➜

KubeLinter

A static analysis tool that checks Kubernetes YAML files and Helm charts for production readiness and security best practices.

An open-source static analysis tool for Kubernetes manifests and Helm charts, checking for best practices.

For more tool information ➜

Ansible-lint

Checks playbooks for practices and behavior that could potentially be improved.

A command-line tool for linting Ansible playbooks, roles, and collections.

For more tool information ➜

Puppet-lint

Check your Puppet manifests for style guide conformity.

A tool that validates Puppet code against the official Puppet language style guide.

For more tool information ➜

Terragrunt

A thin wrapper for Terraform that provides extra tools for keeping your configurations DRY, working with multiple Terraform modules, and managing remote state.

A tool to keep Terraform code DRY (Don't Repeat Yourself) by managing remote state and locking configurations.

For more tool information ➜

CloudQuery

The open-source cloud asset inventory powered by SQL.

An open-source tool that extracts, transforms, and loads cloud asset data into databases for analysis.

For more tool information ➜

Terratest

A Go library that provides patterns and helper functions for testing infrastructure, with first-class support for Terraform, Packer, Docker, and more.

A Go library for writing automated tests for Infrastructure as Code, not a linter but a testing framework.

For more tool information ➜

OPA Gatekeeper

Policy Controller for Kubernetes.

A Kubernetes admission controller that enforces policies created with Open Policy Agent (OPA).

For more tool information ➜

driftctl

The open-source tool for infrastructure drift detection.

An open-source CLI that detects, tracks, and alerts on infrastructure drift.

For more tool information ➜