Best Open-source Container Security tools

Dockle

Secure Docker images with CIS‑compliant linting made simple

Grype

Fast, comprehensive vulnerability scanner for containers and filesystems

Clair

Transparent vulnerability scanning for container images using static analysis

Kubescape

Unified Kubernetes security from development to runtime

Trivy

Unified scanner for vulnerabilities, misconfigurations, secrets, and SBOMs

Falco

Real-time kernel monitoring for cloud-native Linux security

ThreatMapper

Runtime threat detection and attack path visualization for cloud-native workloads

Dagda

Comprehensive Docker image security scanning and runtime monitoring