Skip to main content
🔍

Terrascan

Policy-as-code tool for IaC security across multiple cloud providers

Security
Terrascan logo

Terrascan

Policy-as-code tool for IaC security across multiple cloud providers

Terrascan is an open-source static code analyzer for infrastructure-as-code that applies policy-as-code security checks across Terraform, Kubernetes, Helm, Dockerfile, and CloudFormation. It uses Open Policy Agent (OPA) to define and enforce security policies, supports 500+ pre-built policies for AWS, Azure, GCP, and K8s, and provides integrations with major CI/CD platforms and source control systems. Terrascan's policy-as-code approach lets teams define and version their own compliance rules.

Key Features

  • OPA policy engine
  • 500+ pre-built policies
  • Multi-cloud (AWS/Azure/GCP)
  • Helm/Docker support
  • Custom policies
  • CI/CD integration
#iac-security#opa#policy-as-code#open-source#compliance

Get Started

Visit Terrascan
🟢
Free
Completely free to use

Quick Info

Category
Security
Pricing
Free

More Security Tools