TL;DR - Anchore
- Anchore is a container security platform that scans images for vulnerabilities and policy violations
- It integrates into CI/CD pipelines to prevent insecure containers from reaching production
- Open-source version available, enterprise pricing based on number of images scanned
Pricing: Free plan available
Best for: Growing teams
4.4/5 across review platforms
Pros & Cons
Pros
- Container security scanning
- Policy compliance
- CI/CD integration
- Open source option
- Good documentation
Cons
- Learning curve
- Setup complexity
- Enterprise expensive
- False positives
- UI could improve
Ratings Across the Web
4.4(4 reviews)
Ratings aggregated from independent review platforms. Learn more
Key Features
Container securitySBOM analysisCompliancePolicy enforcementCI/CD integrationEnterprise
Pricing Plans
Free TrialFree
Free
Open source
- Container scanning
- SBOM generation
- Basic policies
- CLI tools
Most Popular
Enterprise
Custom
Full platform
- Policy management
- Compliance reports
- SSO/SAML
- Premium support
About Anchore
By Toolradar Team·
Anchore scans container images for vulnerabilities and policy violations before they reach production. Know what's in your containers, what's risky, and what violates your security policies.
Integration into CI/CD pipelines catches problems early. SBOM generation documents everything in your images. Compliance reporting shows auditors you know what you're deploying.
Security teams managing containerized applications use Anchore to maintain visibility as images multiply. You can't secure what you can't see.
Reviews
No reviews yet. Be the first to review Anchore!
Best Anchore Alternatives
Top alternatives based on features, pricing, and user needs.
Explore More
Anchore FAQ
Is Anchore free?
Anchore has open-source tools (Syft, Grype) that are free. Anchore Enterprise is paid with custom pricing. Good open-source options for container security scanning.
What is Anchore?
Anchore provides container security and compliance tools. Scans container images for vulnerabilities, generates SBOMs, and enforces policies. Used in DevSecOps pipelines.
What is Anchore Grype?
Grype is Anchore's free, open-source vulnerability scanner. Scans container images and filesystems for known vulnerabilities. Simple CLI tool for quick security checks.
What is Anchore Syft?
Syft generates Software Bills of Materials (SBOMs) from container images. Free and open source. Creates inventory of packages in your containers. Works with Grype for vulnerability matching.
Anchore vs Trivy?
Both are good container scanners. Trivy is simpler and faster for quick scans. Anchore has more enterprise features and policy enforcement. Trivy for simplicity; Anchore for compliance.
Source: anchore.com