Open source. Open possibilities.

Checkov is an open-source static analysis tool that scans infrastructure-as-code files and container images for security misconfigurations and vulnerabilities, supporting Terraform, CloudFormation, Kubernetes, Dockerfile, and more with over 1000 built-in policies.