Security scanner for containers
Visit WebsiteReviews onPeerSpot
12 reviews trackedThe Bottom Line
Entry price
Free, no paid tier
Biggest pro
Free and open source
Biggest con
Basic reporting
TL;DR - Trivy
- Trivy is an open-source security scanner for containers and code
- It finds vulnerabilities in images, filesystems, and IaC
- Completely free and open-source
Pricing: Free forever
Best for: Individuals & startups
4.3/5 across review platforms
What is Trivy?
Trivy is an open-source vulnerability scanner for containers, filesystems, and infrastructure as code. Scan container images for OS and library vulnerabilities. Check Kubernetes manifests and Terraform for misconfigurations. Fast and easy to integrate into CI/CD. Comprehensive database updated regularly. The security scanner DevOps teams actually run.
Available on: Web
Pros & Cons
Pros
- Free and open source
- Fast scanning
- Easy to use
Cons
- Basic reporting
- No managed option
Ratings Across the Web
4.3(12 reviews)
Ratings aggregated from independent review platforms. Learn more
Key Features
Security scannerContainersKubernetesSBOMIaC scanningOpen source
Pricing Plans
Pricing checked May 29, 2026
Most Popular
Free
Free
Open source
- Container scanning
- IaC scanning
- SBOM
- CI integration
Reviews
4.3/5
Across 12 verified user reviews on PeerSpot
Add your hands-on experience to help the next buyer.
Best Trivy Alternatives
Top alternatives based on features, pricing, and user needs.
Still deciding?
Most buyers shortlist 2 or 3 tools before committing. Pull a side-by-side comparison or browse the full alternatives shortlist below.
Explore More
Trivy FAQ
Is Trivy free?
Yes, Trivy is completely free and open source. Apache 2.0 license. Made by Aqua Security.
What is Trivy?
Trivy is a vulnerability scanner. Scan containers, filesystems, and repos. Comprehensive security scanner.
Trivy vs Snyk?
Trivy is free and CLI-focused. Snyk has better integrations and UI. Trivy for budget; Snyk for enterprise.
What does Trivy scan?
Container images, filesystems, git repos, and Kubernetes. OS packages and language dependencies. Very comprehensive.
Source: trivy.dev