Open-source alternatives to Snyk

Scanner for vulnerabilities and misconfigurations — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

↔ alternative to Snyk、Prisma Cloud、Aqua Security

Scans IaC and packages for misconfigurations — Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

↔ alternative to Snyk

CLI tool to scan projects for security vulnerabilities — Snyk CLI scans and monitors your projects for security vulnerabilities.

↔ alternative to Snyk

A SAST tool to scan code for security and privacy risks. — Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

↔ alternative to Snyk

Kubernetes-native continuous security scanner — Kubernetes-native security toolkit

↔ alternative to Snyk、Aqua Security

Block malicious npm and PyPI packages during install — Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

↔ alternative to Snyk、Socket

CLI tool for software supply chain and dependency vulnerability scanning. — An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

↔ alternative to Snyk

Audit Python packages for known vulnerabilities — Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

↔ alternative to Snyk

Scan dependencies for vulnerabilities and licenses — OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

↔ alternative to Snyk