Trivy
Apache-2.0⚡ Vulnerability Scanning · Go
Trivy is a comprehensive vulnerability scanner capable of analyzing containers, filesystems, git repositories, and Kubernetes configurations. It generates Software Bill of Materials (SBOM) and identifies vulnerabilities by matching known CVEs against the scanned components. Designed for ease of use, Trivy integrates seamlessly into CI/CD pipelines, enabling continuous security assessments. Its broad coverage and support for multiple formats make it a versatile tool for maintaining security across diverse environments.
Tags
Details
- Category
- ⚡ Vulnerability Scanning
- Language
- Go
- Repository
- aquasecurity/trivy
- License
- Apache-2.0
- Platforms
- 🐧linux🍎macos🪟windows
Links
Used in 1 Workflow
Community Reviews
No reviews yet. Be the first to review Trivy.
Alternatives & Comparisons
Falco
C++Cloud-native runtime security. Detects threats in containers, Kubernetes, and Linux hosts using system call monitoring and custom rules.
Compare Trivy vs FalcoDockle
GoContainer image linter. Checks Docker images for security best practices, CIS benchmarks, and Dockerfile misconfigurations.
Compare Trivy vs DockleMore in Vulnerability Scanning
Nuclei
GoFast vulnerability scanner driven by YAML templates. Thousands of community-contributed detection templates.
sqlmap
PythonAutomatic SQL injection and database takeover tool. Detects and exploits SQL injection flaws.
WPScan
RubyWordPress security scanner. Enumerates plugins, themes, users, and checks for known vulnerabilities.
OpenVAS
CFull-featured vulnerability scanner. 50,000+ NVTs, credentialed scanning, compliance checks.
XSStrike
PythonAdvanced XSS detection suite. Fuzzing engine, context analysis, and WAF detection/bypass capabilities.
Commix
PythonAutomated OS command injection exploitation tool. Tests web apps for command injection vulnerabilities.