Grype

Vulnerability scanner for container images and filesystems

About Grype

Grype scans container images, filesystems and SBOMs for known vulnerabilities across major operating system and language package ecosystems, including Alpine, Debian, RHEL, Python, Java, JavaScript, Go and Rust. It prioritizes findings with EPSS, KEV and risk scoring, supports OpenVEX filtering, and works directly with Syft-generated SBOMs for fast repeat scans.

Grype website preview

Live preview of github.com via the WordPress mShots service — it can take a few seconds to generate on a first visit.

Grype: strengths & things to check

Strengths

Completely free to use — this directory lists no paid plan for it.
Covers vulnerability scanner, containers, security, sbom — see the focus areas listed in its key facts.
Has 6 close alternatives in the same category on this page, so switching or comparing is easy.

Things to check

Free tools can change their model or shut down — avoid locking critical work into it without an export path.
Current plan prices are not listed here (they change too often to print reliably) — confirm the exact price on the official site.
It is one of 1288 tools in the Developer Tools category here — compare it against the alternatives below before you commit.

Derived from this listing's own data (pricing model, focus areas and category) — not a hands-on review score.

Grype pricing

Pricing model	Free — listed in this directory as a free tool, with no paid plan required to use it.
Free access	Yes — fully free
Current plan prices	Listed on the official site — prices change, so this directory links out instead of printing a number that may already be stale.
Official site	github.com

Grype key facts

Category: Developer Tools
Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas: vulnerability scanner, containers, security, sbom
Official site: github.com

Grype FAQ

How much does Grype cost?

Free — listed in this directory as a free tool, with no paid plan required to use it. Current plans and prices are listed on the official site (github.com).

What is Grype used for?

Vulnerability scanner for container images and filesystems Its focus areas in the Developer Tools category: vulnerability scanner, containers, security, sbom.

Where can I try Grype?

On its official site, github.com — the Visit Official Site button above goes straight there.

Grype vs alternatives

	Grype	Syft	Kasm Workspaces	Kata Containers
Pricing	Free — listed in this directory as a free tool, with no paid plan required to use it.	Free — listed in this directory as a free tool, with no paid plan required to use it.	Freemium — a free tier lets you start, and paid plans are available if you need more.	Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas	vulnerability scanner, containers, security, sbom	sbom, containers, security, cli	remote desktop, containers, virtualization, security	containers, virtualization, runtime, security
Official site	github.com	github.com	kasmweb.com	katacontainers.io
Directory status	Listed	Listed	Listed	Listed

Side-by-side from each listing's own directory data. Full alternative cards are below.

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 1288 tools. Alongside Grype, it includes Okteto, Kata Containers, mirrord, CRI-O.

FreeDeveloper Toolsvulnerability-scannercontainerssecuritysbom

Alternatives to Grype

Tools in the same Developer Tools category that share focus areas with Grype — worth comparing before you commit:

Developer Tools

Syft

CLI for generating SBOMs from images and filesystems

Freesbomcontainerssecuritycli

Developer Tools

Kasm Workspaces

Container streaming platform for desktops and apps

Freemiumremote-desktopcontainersvirtualizationsecurity

Developer Tools

Kata Containers

Secure container runtime with lightweight virtual machines

Freecontainersvirtualizationruntimesecurity

Developer Tools

Trivy

All-in-one security scanner for containers and code

Freescannervulnerabilitiescontainerssecurity

Developer Tools

AFLplusplus

Community fork of American Fuzzy Lop fuzzer

Freefuzzingsecuritytestingnative

Developer Tools

Agola

CI/CD platform with multi-executor flexibility

Freecicdpipelinescontainers

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: Okteto — Develop applications directly inside your Kubernetes cluster; Kata Containers — Secure container runtime with lightweight virtual machines; mirrord — Run local processes as if they were pods in your Kubernetes cluster.