Terrascan

Detect compliance and security violations in IaC

About Terrascan

Terrascan is a static code analyzer for infrastructure as code that detects security vulnerabilities and compliance violations before deployment. It runs on your own server or home hardware, so your data stays under your control instead of depending on a third-party cloud service. Regular community releases, public issue trackers, and extensive documentation help new administrators get from a first install to daily use quickly.

Terrascan key facts

Category: Developer Tools
Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas: iac, security, compliance, terraform
Official site: runterrascan.io

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside Terrascan, it includes tfsec, Gitleaks, TruffleHog, OWASP Dependency-Check.

FreeDeveloper Toolsiacsecuritycomplianceterraform

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: tfsec — Security scanner for Terraform code; Gitleaks — Scan code and git history for leaked secrets; TruffleHog — Find leaked credentials hidden anywhere in code.