vioscale
Cloud Security SoftwareUnclaimed

Checkov

Visit websiteCompare alternatives
Also known as
checkov

What is Checkov?

Infrastructure-as-code scanner that identifies misconfigurations across cloud platforms before deployment using policy-as-code framework.

Independently observed

Checkov pricing

We don't have Checkov's full plan breakdown yet (its pricing page resisted automated reading). Here's what we could confirm. Always check live pricing for exact numbers.

What Checkov does

The capabilities that matter for cloud security software, normalised so it lines up with every alternative. “-” means we haven't confirmed it, not that it's missing.

Posture
CSPM (posture / misconfig)
✓
KSPM (Kubernetes posture)
✓
Workload
CWPP (workload protection)
-
Entitlements
CIEM (entitlements)
-
Data
DSPM (data posture)
-
Pipeline
IaC / pipeline scanning
✓
Architecture
Agentless scanning
✓
Runtime
Runtime protection
-
Coverage
Cloud coverage
-
Compliance
Compliance frameworks assessed
-
Licensing
Open-core scanner available
✓
Independently observed

Platform & deployment

Independently observed
Platforms
  • CLI
Deployment
  • Self-hosted

Integrations (26)

Independently observed
  • Terraform
  • Terraform Plan
  • CloudFormation
  • Kubernetes
  • Helm
  • AWS CDK
  • Serverless
  • Bicep
  • ARM Templates
  • Ansible
  • Argo Workflows
  • Kustomize
  • AWS SAM
  • GitHub Actions
  • GitLab CI
  • GitHub
  • GitLab
  • Bitbucket Cloud Pipelines
  • Bitbucket
  • Jenkins
  • CircleCI
  • Azure Pipelines
  • Docker
  • Dockerfile
  • OpenAPI
  • Pre-Commit Hooks

Checkov alternatives

Other cloud security software we track, ranked by the same independent score.

Independent · unbought · dated

The Vioscale score: one lens on the evidence

Not user reviews and not a paid placement: a confidence-weighted blend of the independent signals below (adoption, activity, security posture, and more), which you can sort and re-weight yourself. Vendors can correct their listing but can never move their rank, and stars are weighted low as a vanity metric. It is one way to read the evidence for Checkov, not the verdict.

Balanced composite 67 / 100
low · 32%
Signal contributions to the composite score
SignalScoreWeightContributionEvidence
Package Downloads880.1513.4✓
Release Cadence990.065.7✓
Capabilities750.075.2✓
Integrations410.072.9✓
Github Activity270.102.8✓
Github Stars750.032.2✓
Security Posture00.230.0-
Stackoverflow Activity00.070.0-

Computed . Re-weight it by intent, or see the full method.

All data & sourcesshow ↓

Every value we hold, with its source, retrieval date, and confidence. This is the evidence behind the score: don't trust it, verify it.

Activity

AttributeValueEvidence
Commits last 30d6mediumsource · 2026-08-01 · 65%

Adoption

AttributeValueEvidence
Github stars8,902highsource · 2026-08-01 · 90%
Package downloads weekly5,946,903highsource · 2026-08-01 · 85%

Features

AttributeValueEvidence
Capabilities{"cspm":true,"kspm":true,"iac_scanning":true,"open_core_scanner":true,"agentless_scanning":true}mediumsource · 2026-08-05 · 60%

Integrations

AttributeValueEvidence
Count26mediumsource · 2026-08-05 · 60%

Language

AttributeValueEvidence
PrimaryPythonhighsource · 2026-08-01 · 98%

License

AttributeValueEvidence
SpdxApache-2.0mediumsource · 2026-08-01 · 67%

Pricing

AttributeValueEvidence
Modelopen_sourcemediumsource · 2026-08-05 · 60%
Price levelfreemediumsource · 2026-08-05 · 60%

Release

AttributeValueEvidence
Cadence days2mediumsource · 2026-08-01 · 70%