Grype

Name: Grype
Brand: Grype

Claim this tool

Vulnerability scanner for container images

Free, no paid tier

Free Security Testing & QA CI/CD

Visit Website

Free Visit Website

Tracked since 2025

The Bottom Line

Updated Sep 28, 2026

Price: Free, no paid tier. Compare plans

Key facts

Grype is an open-source vulnerability scanner for container images and filesystems
It scans for known vulnerabilities using multiple databases with fast results
Completely free and open-source

Pros

Open source vulnerability scanner
Container scanning
Fast
CI/CD integration
Active development

Cons

CLI only
Learning curve
Database updates needed
False positives possible
Enterprise features limited

What is Grype?

Grype scans container images for vulnerabilities. Feed it an image, get back a list of known CVEs-container security scanning that fits into build pipelines. The scanning is fast. The database updates regularly. Integration with CI is straightforward. Container security starts with knowing what vulnerabilities exist. Grype provides that visibility in builds.

Available on: Web, macOS, Linux, Windows

Data compiled by Toolradar Pricing checked Sep 28, 2026 · How we evaluate

Source github.com

Key Features

Vulnerability scanning
Container images
SBOM support
CI/CD integration
Open source
Anchore

Pricing Plans

Pricing checked Sep 28, 2026. Source: github.com/anchore/grype, read Sep 28, 2026

Grype plans and prices, checked September 2026
Plan	Price	Details
Open Source	Free	Full source code access Apache License 2.0 license Community support +1 more Show less Self-hosted

View full pricing

Is Grype worth the price?

Great value

Grype's pricing is exceptionally generous, as it is entirely free and open-source.

This makes it an incredibly fair and accessible option compared to commercial vulnerability scanners. It's best for individual developers, small teams, and organizations prioritizing cost-effectiveness and transparency.

Full Grype pricing: every plan, hidden costs and alternatives

Grype by the numbers

Grype compared with 115 CI/CD tools on Toolradar, as of Oct 2026
Metric	Grype	Peer median	Position (1 is best)
Free plan	Yes	86% have one	n/a
Listed as an alternative to	7 tools	1	#25 of 115 (joint)
Compare-page visits, last 30 days	21 visits	41	#23 of 26 tools with 20+ compare-page visits

Each position is counted among the tools that have data for that row, as noted under it. All CI/CD data · How we compute this. Advertising and placement fees are not inputs to any position. Visit counts include visits from every source.

Cite this: Toolradar, “Grype by the numbers”, Oct 2026.

Reviews

Improve Your Thinking Patterns Using ChatGPT cover

$99 Free with your review

Review Grype, get a free AI guide

Share your experience and we will send you Improve Your Thinking Patterns Using ChatGPT, free.

Write a review

Best Grype Alternatives

Top alternatives based on features, pricing, and user needs.

Snyk Freemium

Secure your code, dependencies, containers, and IaC from dev to production

4.5

Aqua Security Paid

Cloud native security for containers and Kubernetes

4.2

Clair Free

Static vulnerability analysis for containers

4.3

Trivy Free

Security scanner for containers

4.3

See all security tools →

Still deciding?

Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.

Grype vs Snyk Head-to-head: features, pricing, who wins Grype vs Aqua Security Head-to-head: features, pricing, who wins Grype vs Clair Head-to-head: features, pricing, who wins

Explore More

Grype FAQ

How does Grype help secure container images?

Grype scans container images to identify known Common Vulnerabilities and Exposures (CVEs). It provides a list of these vulnerabilities, offering visibility into potential security risks within your container builds.

Which teams benefit most from using Grype?

Teams focused on Security, Testing & QA, and CI/CD will find Grype most beneficial. It helps integrate vulnerability scanning directly into development workflows to catch issues early.

How is Grype priced?

Grype is free to use, as it is an open-source vulnerability scanner. There is no paid plan required to access its features.

What kind of limitations should users be aware of when adopting Grype?

Grype is a CLI-only tool, which means it lacks a graphical user interface. Users should also anticipate a learning curve, the need for regular database updates, and the possibility of false positives in scan results.

Can Grype be integrated into existing build pipelines?

Yes, Grype is designed for straightforward integration with CI/CD pipelines. It allows for container security scanning to be incorporated directly into the build process.

How does Grype compare to Trivy for container scanning?

Grype, like Trivy, is an open-source vulnerability scanner focused on container images. Grype emphasizes fast scanning and CI/CD integration, providing a similar function for identifying CVEs within builds.

Why is regular database updating important for Grype?

Regular database updates are crucial for Grype because it relies on an updated database of known CVEs to accurately identify vulnerabilities. Keeping the database current ensures the scanner can detect the latest threats.

Source: github.com

Guides & Articles

Best MCP Gateways & AI Agent Security Tools 2026

Expert guide

Best Deepfake Detection Tools 2026

Expert guide

Best AI Governance Tools 2026

Expert guide