Best Open-source Container Security tools

Grype

Fast, comprehensive vulnerability scanner for containers and filesystems

Trivy

Unified scanner for vulnerabilities, misconfigurations, secrets, and SBOMs

Kubescape

Unified Kubernetes security from development to runtime

Clair

Transparent vulnerability scanning for container images using static analysis

ThreatMapper

Runtime threat detection and attack path visualization for cloud-native workloads

Falco

Real-time kernel monitoring for cloud-native Linux security

Dockle

Secure Docker images with CIS‑compliant linting made simple

Dagda

Comprehensive Docker image security scanning and runtime monitoring