Trivy Alternatives

Trivy is described as 'Scanner for vulnerabilities in container images, file systems, and Git repositories, as well as for configuration issues and hard-coded secrets' and is a vulnerability scanner in the security & privacy category. There are more than 10 alternatives to Trivy for a variety of platforms, including Linux, Mac, Windows, Web-based and SaaS apps. The best Trivy alternative is TDSSKiller, which is free. Other great apps like Trivy are Lynis, GMER, Pareto Security and Cloud (IaC) Security for JetBrains IDEs.

More about Trivy
Copy a direct link to this comment to your clipboard
Get a badge for your siteTrivy alternatives page was last updated

Alternatives list

  1. R

    RootkitRevealer

     1 like

    RootkitRevealer is an advanced rootkit detection utility. It runs on Windows NT 4 and higher and its output lists Registry and file system API discrepancies that may indicate the presence of a user-mode or kernel-mode rootkit.

    Cost / License

    • Free
    • Proprietary

    Platforms

    • Windows
    • Online
    Screenshot of RootkitRevealer detecting the presence of the popular HackerDefender rootkit.
     
  2. CVE Lite CLI icon

    CVE Lite CLI

     Like

    Scans JavaScript and TypeScript lockfiles for vulnerabilities, distinguishes direct versus transitive issues, generates severity-grouped copy-and-run fix commands, offers HTML and CI-ready reports, supports offline use, and works without sending any data.

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Platforms

    • Mac
    • Windows
    • Linux
    CVE Lite CLI screenshot 1
     
  4. PackageFix icon

    PackageFix

     Like

    PackageFix is a free browser-based dependency security fixer. Paste your manifest file and get back a fixed version with every vulnerable package patched — ready to download in one click.

    Cost / License

    • Free
    • Open Source (MIT)

    Application type

    Alerts

    • Discontinued

    Platforms

    • Online
    Live CVE scan via OSV database. CISA KEV banner flags actively exploited packages first. Health score, severity badges, fix versions, and side-by-side diff all in one view.
     
  5. SimpleumCheck icon

    SimpleumCheck

     Like

    SimpleumCheck is a free security advisor for Mac. This resourceful little program makes a security check on the computer and shows you what security settings you should make. On our website we inform in detailed F.A.Q. articles about where and how you can change the settings.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Mac
    • iPhone
    • iPad
     
  7. Keelscan icon

    Keelscan

     Like

    Examines codebases for secrets, dependency risks, and unsafe API keys, checks running apps for TLS and security headers, and analyzes Supabase, Firebase, and Firestore configs for exposure—then provides a single grade, report, and actionable fixes.

    Cost / License

    • Freemium
    • Proprietary

    Application type

    Platforms

    • Online
    • Software as a Service (SaaS)
    Code scan report: one A-F posture grade, compliance readiness for SOC 2 and HIPAA control areas, and a Trust page you can publish at a public URL to send buyers who ask "is your app secure?
     
  8. CollectCore icon

    CollectCore

     Like

    CollectCore is a Linux server auditing system.

    Cost / License

    • Paid
    • Proprietary

    Platforms

    • Linux
     
  9. sbomify action icon

    sbomify action

     Like

    Generates software bills of materials in CI by extracting package data from lockfiles, containers, and source directories with native tooling across fourteen ecosystems, supports CycloneDX and SPDX formats, adds metadata, enables trusted OIDC publishing, and build provenance with diverse export options.

    Cost / License

    Platforms

    • Linux
    • Docker
    sbomify action screenshot 1
     
You are at page 2 of Trivy alternatives