Best Open-source Container Security tools

Falco

Real-time kernel monitoring for cloud-native Linux security

Clair

Transparent vulnerability scanning for container images using static analysis

Grype

Fast, comprehensive vulnerability scanner for containers and filesystems

Trivy

Unified scanner for vulnerabilities, misconfigurations, secrets, and SBOMs

Kubescape

Unified Kubernetes security from development to runtime

ThreatMapper

Runtime threat detection and attack path visualization for cloud-native workloads

Dockle

Secure Docker images with CIS‑compliant linting made simple

Dagda

Comprehensive Docker image security scanning and runtime monitoring