Terrascan is a static code analyzer designed for Infrastructure as Code (IaC) security scanning and compliance validation. The tool performs static analysis on various IaC formats including Terraform, AWS CloudFormation, Azure Resource Manager templates, Kubernetes manifests, and Dockerfiles to identify security misconfigurations and compliance violations. Terrascan includes over 500 built-in security policies based on industry best practices and compliance frameworks. It can detect common security issues such as misconfigured cloud resources, insecure network configurations, and policy violations across multiple cloud platforms. The tool supports integration with CI/CD pipelines and can be executed locally or as part of automated workflows. It provides scanning capabilities for AWS, Azure, Google Cloud Platform, Kubernetes environments, and Docker containers. Terrascan generates detailed reports highlighting identified security issues and compliance violations, enabling teams to remediate problems before infrastructure deployment. The tool supports both command-line usage and integration with version control systems like GitHub for automated security checks.