KICS helps you discover security vulnerabilities and compliance issues in your Infrastructure as Code (IaC).
KICS (Keeping Infrastructure as Code Secure) is an open-source tool by Checkmarx that scans IaC templates for security flaws. It supports numerous IaC languages like Terraform, CloudFormation, Kubernetes, and more, identifying misconfigurations before deployment. You can run it via CLI with commands like `kics scan --input-dir /path/to/iac` or use its Docker image.
KICS helps you discover security vulnerabilities and compliance issues in your Infrastructure as Code (IaC).
Developers and security engineers working with IaC who want to catch issues early in the development lifecycle.
Not enough data yet. Star history will appear after a few days of tracking.