Open-source alternatives to Snyk

Scanner for vulnerabilities and misconfigurations — Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

↔ alternative to Snyk、Prisma Cloud、Aqua Security

Scans IaC and packages for misconfigurations — Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

↔ alternative to Snyk

Kubernetes-native continuous security scanner — Kubernetes-native security toolkit

↔ alternative to Snyk、Aqua Security

Scan project dependencies for known security vulnerabilities — An open source tool focused on software supply chain security. 墨菲安全专注于软件供应链安全，具备专业的软件成分分析（SCA）、漏洞检测、专业漏洞库。

↔ alternative to Snyk、Black Duck、Mend

Block malicious npm and PyPI packages during install — Protect against malicious code installed via npm, yarn, pnpm, npx, pnpx, pip, uv and poetry with Aikido Safe Chain. Free to use, no tokens required.

↔ alternative to Snyk、Socket

Docker security scanner — The Most Comprehensive Docker Security Scanner

↔ alternative to Snyk、Aqua Security

Scan Node projects for known package vulnerabilities — node security platform command-line tool

↔ alternative to Snyk

Scan codebase dependencies for licenses and vulns — Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.

↔ alternative to Snyk

Dependency vulnerability scanner for builds and PRs — LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

↔ alternative to Snyk

Audit Python packages for known vulnerabilities — Audits Python environments, requirements files and dependency trees for known security vulnerabilities, and can automatically fix them

↔ alternative to Snyk

CLI scanner for project security vulnerabilities — Horusec is an open source tool that improves identification of vulnerabilities in your project with just one command.

↔ alternative to Snyk、Checkmarx、Veracode

Scan dependencies for vulnerabilities and licenses — OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

↔ alternative to Snyk

Open source software supply chain security scanner — OpenSCA is an open source software supply chain security solution that supports the detection of open source dependencies, vulnerabilities and license compliance with a widely noticed accuracy by the community.

↔ alternative to Snyk、Black Duck