tfsec

Security scanner for Terraform code

About tfsec

tfsec is a security scanner for Terraform that checks code against hundreds of built-in rules for AWS, Azure, and Google Cloud. Because it is self-hosted, you decide where the data lives, who can access it, and how long it is kept, with no per-seat lock-in. Regular community releases, public issue trackers, and extensive documentation help new administrators get from a first install to daily use quickly.

tfsec key facts

Category: Developer Tools
Pricing: Free — listed in this directory as a free tool, with no paid plan required to use it.
Focus areas: terraform, scanner, security, iac
Official site: aquasecurity.github.io

About the Developer Tools category

Editors, platforms, and services developers rely on to build and ship software. The Developer Tools category on Tools Hub currently lists 738 tools. Alongside tfsec, it includes Gitleaks, TruffleHog, OWASP Dependency-Check, Retire.js.

FreeDeveloper Toolsterraformscannersecurityiac

More in Developer Tools

Comparing tools in the Developer Tools category? These related listings are worth a look: Gitleaks — Scan code and git history for leaked secrets; TruffleHog — Find leaked credentials hidden anywhere in code; OWASP Dependency-Check — Identify known vulnerabilities in project dependencies.