Policy as Code Testing
Compare 41 policy as code testing tools to find the right one for your needs
🔧 Tools
Compare and find the best policy as code testing for your needs
Spacelift
A specialized CI/CD platform for IaC that provides policy-as-code, state management, and collaboration features.
env0
An IaC automation platform that provides governance, cost management, and self-service capabilities for Terraform, Terragrunt, and other IaC tools.
Kubescape
An open-source Kubernetes security posture management tool that scans for misconfigurations and vulnerabilities.
Kyverno
A policy engine designed for Kubernetes that can validate, mutate, and generate configurations using policies.
Scalr
A Terraform automation and collaboration platform with a hierarchical model for policy and workspace management.
Open Policy Agent (OPA)
An open-source, general-purpose policy engine that enables unified, context-aware policy enforcement across the entire stack.
Datadog Cloud Security Management
A cloud security solution from Datadog that includes IaC scanning.
Snyk IaC
A developer-first security platform that helps you find and fix misconfigurations in your IaC files.
HashiCorp Sentinel
An embeddable policy-as-code framework that integrates with the HashiCorp Enterprise products.
Azure Policy
A service in Azure that you use to create, assign, and manage policies for your Azure resources.
Styra Declarative Authorization Service (DAS)
An enterprise management plane for Open Policy Agent (OPA).
Infracost
Shows cloud cost estimates for Terraform.
Datree
A policy enforcement solution for Kubernetes that helps you prevent misconfigurations in your manifests.
Fugue
A cloud security platform that helps you manage the entire lifecycle of your cloud infrastructure, from code to cloud.
Ansible security automation
Use Ansible to automate your security processes.
Lacework
A cloud security platform that provides IaC security, CSPM, CWPP, and threat detection.
tfsec
A static analysis tool for Terraform code to spot potential security issues.
Trivy
A comprehensive security scanner that finds vulnerabilities, misconfigurations, secrets, and SBOMs in a wide range of targets.
Bridgecrew
A cloud security platform that helps you find and fix security and compliance issues in your cloud infrastructure.
Pulumi CrossGuard
A policy-as-code framework for Pulumi that allows you to enforce policies on your infrastructure using familiar programming languages.
Conftest
A utility to help you write tests against structured configuration data using the Rego language from Open Policy Agent.
Chef InSpec
An open-source testing framework for infrastructure with a human-readable language for specifying compliance, security, and policy requirements.
Prisma Cloud by Palo Alto Networks
A comprehensive cloud security platform that includes IaC scanning, CSPM, CWPP, and more.
Accurics
A cloud security platform that provides security and governance for the full cloud native stack.
KubeLinter
A linter for Kubernetes that checks for best practices and security issues.
Checkov
A static code analysis tool for infrastructure-as-code.
Terrascan
A static code analysis tool for IaC that helps you detect security vulnerabilities and compliance violations.
KICS
An open-source static analysis tool that finds security vulnerabilities, compliance issues, and infrastructure misconfigurations in IaC.
Puppet Comply
A tool for assessing and remediating compliance issues.
Regula
An open-source tool that evaluates infrastructure as code for security and compliance.
Terratest
A Go library for writing automated tests for your infrastructure code.
Atlantis
Automates Terraform via pull requests.
CloudFormation Guard
An open-source tool for validating CloudFormation templates.
Prowler
A security tool for AWS, Azure, and GCP.
Cloud Custodian
An open-source tool that allows you to manage your cloud resources by defining policies in YAML.
AWS CloudFormation Guard
An open-source policy as code tool for checking compliance of AWS CloudFormation templates and other structured data.
Terragrunt
A tool that helps you write more maintainable and reusable Terraform code.
OPA Gatekeeper
A customizable admission webhook for Kubernetes that enforces policies executed by the Open Policy Agent (OPA).
Ansible Lint
A command-line tool for linting Ansible playbooks, roles, and collections.
TFLint
A linter for Terraform that checks for possible errors, best practices, and naming conventions.
KICS by Checkmarx
An open source static analysis tool for IaC.