Best Cloud Vulnerability Scanners in 2026
Updated
In short: Intruder is ranked #1 of 24 as of 4 October 2026, ahead of Kubescape and Mondoo CSPM. The best-ranked option with a free plan is Kubescape. The lowest first paid tier on this page is Alibaba Cloud Security Center at $1/mo.
Cloud vulnerability scanners help teams inspect cloud environments for security issues across infrastructure and workloads. Compare cloud platform coverage and deployment models with workload scanning and IaC scanning to see how each option fits your stack. Identity analysis and attack path analysis offer additional lenses on findings, while free-plan availability and starting paid prices help frame access. Intruder and Kubescape open the entries, followed by Mondoo CSPM and Prowler Cloud. Qualys TotalCloud, Astra Security, Cyscale CSPM and Cy5 Cloud-Native Vulnerability Management also feature near the top. Use the listed capabilities to judge which scanning scope and deployment approach make sense for your cloud environment.
24 cloud vulnerability scanners ranked on what their makers publish — plans and prices, free tiers, platforms and the facts on their own pages.
| # | Platform | Score | Why | From | Free plan | Paid from | Cloud platforms | |
|---|---|---|---|---|---|---|---|---|
| 1 | Intruder | 7.3 | RecognisedAPIDocumented | Free | Yes | — | — | View |
| 2 | Kubescape | 7.3 | RecognisedAPIDocumented | Free | Yes | — | — | View |
| 3 | Mondoo CSPM | 7.3 | RecognisedAPIDocumented | Free | Yes | — | — | View |
| 4 | Prowler Cloud | 7.3 | RecognisedAPIDocumented | $99/mo | No | — | — | View |
| 5 |  Qualys TotalCloud | 7.3 | RecognisedAPIDocumented | Free | No | — | AWS, Microsoft Azure, Google Cloud Platform, Oracle Cloud Infrastructure | View |
| 6 | Astra Security | 6.8 | RecognisedAPIDocumented | $58.25/mo | Yes | — | — | View |
| 7 | Cyscale CSPM | 6.7 | RecognisedAPIDocumented | $850/mo | No | — | — | View |
| 8 |  Google Artifact Analysis | 6.6 | RecognisedAPIDocumented | — | No | — | — | View |
| 9 | Cy5 Cloud-Native Vulnerability Management | 5.9 | RecognisedAPIDocumented | — | — | — | AWS, Azure, GCP | View |
| 10 |  OpenCNAPP | 5.9 | RecognisedAPIDocumented | — | — | — | — | View |
| 11 | RapidFort | 5.9 | RecognisedAPIDocumented | Free | Yes | — | — | View |
| 12 |  ZeusCloud | 5.9 | RecognisedAPIDocumented | Free | Yes | — | AWS | View |
| 13 |  AccuKnox | 5.8 | RecognisedAPIDocumented | — | Yes | — | AWS; Azure; GCP; Oracle; OpenStack; OpenShift; Nutanix; VMware; IBM Cloud; DigitalOcean; Alibaba Cloud | View |
| 14 | Alibaba Cloud Security Center | 5.8 | RecognisedAPIDocumented | $1/mo | Yes | — | Alibaba Cloud, AWS, Azure, Huawei Cloud, Tencent Cloud, Volcano Engine | View |
| 15 | Tencent Cloud Security Center | 5.6 | RecognisedAPIDocumented | — | Yes | — | Tencent Cloud and other cloud platforms | View |
| 16 |  Grype | 5.4 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 17 | Trivy | 5.4 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 18 | Onam Security API Security | 5.3 | RecognisedAPIDocumented | — | Yes | — | — | View |
| 19 | Tenable One Cloud Security | 5.3 | RecognisedAPIDocumented | — | — | — | — | View |
| 20 |  Tencent Cloud CDN | 5.3 | RecognisedAPIDocumented | CNY 21/mo | Yes | — | Tencent Cloud and other cloud platforms | View |
| 21 | SUSE Multi-Linux Manager | 5.2 | RecognisedAPIDocumented | — | — | — | — | View |
| 22 |  Holm Security Cloud Security | 5.1 | RecognisedAPIDocumented | — | — | — | AWS, Microsoft Azure, Microsoft 365, Google Cloud, Oracle Cloud | View |
| 23 | Anchore Enterprise | 4.8 | RecognisedAPIDocumented | — | No | — | — | View |
| 24 | Amazon Inspector | 4.6 | RecognisedAPIDocumented | — | No | — | — | View |
Is your platform on this list?
Numbered spots on this list can be sponsored. They are labelled, and the editorial order and scores never change for payment.
Questions about this list
Which cloud vulnerability scanner is ranked first on Inferse?
Intruder is ranked #1 of 24 with a score of 7.3. Kubescape is second and Mondoo CSPM third.
How many of these have a free plan?
7 of the 24 on this page publish a free plan on their own pricing pages.
Which is the cheapest paid option?
On this page, Alibaba Cloud Security Center has the lowest first paid tier we found: $1/mo.
How is this list ranked?
Ranked on what each maker publishes, open and connectable first: a public API, open-source code, the depth of its documentation and a free tier to try it on. Model lists are sorted by the figure in their title, exactly as each provider publishes it. Paid placements never change a rank.