
tfsec is being replaced by Trivy, a more comprehensive open-source security solution
Checked October 2026.
tfsec to Trivy Migration
As part of our goal to provide a comprehensive open source security solution for all, we have been consolidating all of our scanning-related efforts in one place, and that is Trivy. Over the past year, tfsec has laid the foundations to Trivy's IaC & misconfigurations scanning capabilities, including Terraform scanning, which has been natively supported in Trivy for a long time now.
Going forward we want to encourage the tfsec community to transition over to Trivy. Moving to Trivy gives you the same excellent Terraform scanning engine, with some extra benefits: Access to more languages and features in the same tool. Access to more integrations with tools and services through the rich ecosystem around Trivy.
Commercially supported by Aqua as well as by a the passionate Trivy community. tfsec will continue to remain available for the time being, although our engineering attention will be directed at Trivy going forward. tfsec to Trivy migration guide For further information on how Trivy compares to tfsec and moving from tfsec to Trivy, do have a look at the migration guide.
Overview tfsec uses static analysis of your terraform code to spot potential misconfigurations and security vulnerabilities.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about tfsec to Trivy Migration: features, pricing and alternatives.
tfsec to Trivy Migration is a product in the Security Scanning category. It covers Security Scanning.
tfsec to Trivy Migration is free. Download and setup instructions are at https://github.com/aquasecurity/tfsec/.
Alternatives to tfsec to Trivy Migration listed on CybersecTools:
Compare all tfsec to Trivy Migration alternatives at https://cybersectools.com/alternatives/tfsec-to-trivy-migration
tfsec to Trivy Migration is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
A tool for testing subdomain takeover possibilities at a mass scale.
Terrascan is a static code analyzer that scans Infrastructure as Code for security misconfigurations and compliance violations across multiple cloud platforms and container environments.
testssl.sh is a free command line tool for checking server's TLS/SSL configurations with clear and machine-readable output.
REST API service for scanning files/URLs for malware, viruses & NSFW content.
Website privacy and security testing tool for cookie and third-party analysis
A next-generation web scanner that identifies websites and recognizes web technologies, including content management systems, blogging platforms, and more.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI