AWS CloudFormation Guard alternatives

Nearest on its board

1. 24
   HS

   HashiCorp Sentinelhashicorp.com
   4.3 APIOpenFree —
   →
2. 23
   CI

   Chef InSpecchef.io
   4.4 APIOpenFree —
   →
3. 22
   GC

   Google Cloud Policy Controllerdocs.cloud.google.com
   4.8 APIOpenFree Free tier
   →
4. 21
   AP

   Azure Policyazure.microsoft.com
   4.8 APIOpenFree Free tier
   →
5. 20
   NE

   Nirmata Enterprise for Kyvernonirmata.com

   Nirmata Enterprise for Kyverno is an OSS-compatible, no-fork distribution of Kyverno for organizations that need a hardened and supported Kubernetes policy…

   5.0 APIOpenFree From $14,800/yr
   →
6. 19
   TT

   Terraform Test Frameworktf2project.io

   TF2 is a unified framework for testing Terraform code and Terraform-provisioned infrastructure.

   5.1 APIOpenFree —
   →
7. 18
   F

   Fireflyfirefly.ai

   Firefly automates cloud infrastructure with Infrastructure-as-Code and helps teams govern cloud environments and recover from outages and cyberattacks.

   5.5 APIOpenFree From $2,499/mo
   →
8. 17
   TC

   terraform-complianceterraform-compliance.com

   terraform-compliance is a lightweight, security- and compliance-focused test framework for negative testing of infrastructure as code written with Terraform.

   5.8 APIOpenFree Free tier
   →
9. 16
   P

   PolicyForgegithub.com

   PolicyForge is an open-source policy-as-code scanner for infrastructure-as-code.

   6.0 APIOpenFree Free tier
   →
10. 15
    K

    KubeLinterdocs.kubelinter.io

    KubeLinter statically analyzes Kubernetes YAML, Helm charts, and Kustomize manifests for best practices, production readiness, and security.

    6.0 APIOpenFree Free tier
    →
11. 14
    C

    Checkovcheckov.io

    Checkov scans infrastructure-as-code files for misconfigurations that can cause security or compliance problems.

    6.0 APIOpenFree Free tier
    →
12. 13
    T

    Tirithgithub.com

    Tirith evaluates infrastructure documents against declarative JSON policies and reports which rules passed or failed, including the affected resource and value.

    6.0 APIOpenFree Free tier
    →
13. 12
    K

    KICSkics.io

    KICS is an open-source static code analysis solution that finds security vulnerabilities, compliance issues, and infrastructure misconfigurations in…

    6.2 APIOpenFree Free tier
    →
14. 11
    CC

    Cloud Custodiancloudcustodian.io

    Cloud Custodian manages cloud resources by filtering and tagging them, then applying actions through policies written in a YAML domain specific language.

    6.2 APIOpenFree Free tier
    →
15. 10
    K

    Kubewardenkubewarden.io

    Kubewarden is an open source security platform for Kubernetes that secures workloads across their lifecycle.

    6.3 APIOpenFree Free tier
    →
16. 9
    C

    Conftestconftest.dev

    Conftest is a utility for writing tests against structured configuration data.

    6.6 APIOpenFree Free tier
    →
17. 8
    GC

    Google Cloud Terraform Policy Validationdocs.cloud.google.com

    gcloud beta terraform vet enforces policy compliance as part of an infrastructure CI/CD pipeline.

    6.6 APIOpenFree Free tier
    →
18. 7
    OP

    Open Policy Agentopenpolicyagent.org

    OPA is an open-source, general-purpose policy engine that unifies policy enforcement across software systems.

    6.7 APIOpenFree Free tier
    →
19. 6
    FP

    Fairwinds Polarisfairwinds.com

    Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration.

    6.7 APIOpenFree Free tier
    →
20. 5
    AC

    AWS CloudFormationaws.amazon.com

    AWS CloudFormation models, provisions, and manages AWS resources from declarative templates.

    6.7 APIOpenFree Free tier
    →