KICS helps you discover security vulnerabilities and compliance issues in your Infrastructure as Code (IaC).
KICS (Keeping Infrastructure as Code Secure) is an open-source tool by Checkmarx that scans IaC templates for security flaws. It supports numerous IaC languages like Terraform, CloudFormation, Kubernetes, and more, identifying misconfigurations before deployment. You can run it via CLI with commands like `kics scan --input-dir /path/to/iac` or use its Docker image.
KICS helps you discover security vulnerabilities and compliance issues in your Infrastructure as Code (IaC).
Developers and security engineers working with IaC who want to catch issues early in the development lifecycle.
Not enough data yet. Star history will appear after a few days of tracking.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud native project.