Comparison

Checkov vs Lacework

No clear leader: Checkov (64.0) and Lacework (60.3) are within the 5-point margin; treat as a tie. The attribute-by-attribute breakdown below, with a source and date on every value, is the honest way to compare them.

Machine formatsJSONMarkdownGraphQLor send Accept: application/json
Checkov64
Lacework60
Score
Vioscale score
Checkov64 / 100low · 47%
Lacework60 / 100low · 27%
Pricing
Free tier
Checkov
Lacework
Model
Laceworkcommercial
Price level
Checkovfree
Lacework
Integrations
Count
Checkov13
Lacework
Security
Iso27001
Checkov
Lacework
Scorecard
Checkov7
Lacework
Soc2
Checkov
Lacework
Reliability
Status page
Checkov
Lacework
Adoption
Dependent repos
Checkov138
Lacework
Github stars
Checkov8,973
Lacework
Package downloads weekly
Checkov4,830,339
Lacework
Activity
Commits last 30d
Checkov17
Lacework
Release
Cadence days
Checkov4
Lacework
History
Checkov20 items
Lacework
License
Spdx
CheckovApache-2.0
Lacework
Language
Primary
CheckovPython
Lacework

Capabilities

Feature-by-feature on the axes that matter for cloud security software. “-” means undocumented, not absent.

Posture
CSPM (posture / misconfig)
Checkov
Lacework-
KSPM (Kubernetes posture)
Checkov
Lacework-
Workload
CWPP (workload protection)
Checkov-
Lacework-
Entitlements
CIEM (entitlements)
Checkov-
Lacework-
Data
DSPM (data posture)
Checkov-
Lacework-
Pipeline
IaC / pipeline scanning
Checkov
Lacework-
Architecture
Agentless scanning
Checkov
Lacework-
Runtime
Runtime protection
Checkov-
Lacework-
Coverage
Cloud coverage
CheckovAWS, Google Cloud, Azure
Lacework-
Compliance
Compliance frameworks assessed
Checkov-
Lacework-
Licensing
Open-core scanner available
Checkov
Lacework-

What each one is

The product in its own terms, so the numbers below have context.

Checkov

Checkov scans infrastructure-as-code configurations across Terraform, Kubernetes, CloudFormation, Dockerfile, and other IaC formats to detect security vulnerabilities and compliance violations before deployment.

Independently observed

Lacework

Not documented yet.

Pricing

List pricing as published by each vendor, with the date we read it. Always verify at the source before you buy.

Checkov

Open sourceFree tier
as of verify ↗

Lacework

Pricing not documented yet.

Platform & deployment

Where each product runs and how it can be hosted. A dash means undocumented, not unsupported.

Platforms
CLI
Checkov
Lacework
Deployment
Cloud / SaaS
Checkov
Lacework
Self-hosted
Checkov
Lacework

Integrations

What each product connects to. Counts come from the vendor's own integration directory where one exists.

Checkov

13 total
  • AWS
  • Google Cloud
  • Azure
  • Docker
  • Terraform
  • Kubernetes
  • CloudFormation
  • Dockerfile
  • Git
  • GitHub
  • Helm
  • Kustomize
  • Serverless
Independently observed

Lacework

Not documented yet.

Comparison generated from independently-sourced facts. Every value links to its source and retrieval date. See the method.

Checkov vs Lacework: an evidence-based comparison · Vioscale