Software Development

Checkov

Checkov is a policy-as-code tool that scans cloud infrastructure configurations to detect misconfigurations before deployment.

Visit website

Own Checkov?Claim this page

Overview

Checkov scans infrastructure as code files across multiple platforms like Terraform, CloudFormation, Kubernetes, and more to identify misconfigurations. It supports attribute-based and graph-based policies, integrates with CI/CD workflows, and allows custom policy creation.

Updated Oct 26, 2026

1 thing

What Checkov has

For developers

A command-line interface that lets you run the tool from a terminal or scripts. One of 42 Software Development tools with CLI.

6 features

Key Features

Infrastructure scanning
Checkov scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Resource verification
Verify changes to hundreds of supported resource types in all major cloud providers.
Supported frameworks
Checkov supports developers using Terraform, Terraform plan, CloudFormation, Kubernetes, ARM Templates, Serverless, Helm, and AWS CDK.
Attribute policies
Scan cloud resources in build-time for misconfigured attributes with a simple Python policy-as-code framework.
Graph policies
Analyze relationships between cloud resources using Checkov’s graph-based YAML policies.
Custom policies
Extend Checkov to define your own custom policies, providers, and suppressions terms.

Pros and cons

Pros

Supports a wide range of IaC frameworks and cloud providers for comprehensive scanning.
Open source with community contributions enabling extensibility and custom policies.
Integrates seamlessly into CI/CD pipelines for automated security checks.
Provides both attribute-based and graph-based policy analysis for thorough misconfiguration detection.
Allows live testing and modification of scan parameters in terminal for flexible usage.

Cons

No explicit pricing or enterprise plans detailed on the website.
Primarily command-line interface based, which may have a learning curve for non-developers.
Limited information on GUI or dashboard features for scan result visualization.
May require Python knowledge to create advanced custom policies.
Focuses on infrastructure code scanning but does not cover runtime security or application code vulnerabilities.

Developer features

Command line interface
Checkov uses a common command line interface to manage and analyze infrastructure as code (IaC) scan results across platforms such as Terraform, CloudFormation, Kubernetes, Helm, ARM Templates and Serverless framework.

You?

Be the first to rate Checkov

Your review helps others make better decisions. No account needed. Takes about 10 seconds.

Featured Video

See Checkov at work before you try it.

Watch on YouTube

0 questions

Frequently Asked Questions

No reviews yet

Community reviews

Sort:Write a review

No written reviews yet. Be the first to share your experience.

Tried this tool? Share your experience.

Write a review

No reviews yet

Community reviews

Sort:Write a review

No written reviews yet. Be the first to share your experience.

Tried this tool? Share your experience.

Write a review

1 thing

What Checkov has

For developers

A command-line interface that lets you run the tool from a terminal or scripts. One of 42 Software Development tools with CLI.

6 features

Key Features

Infrastructure scanning
Checkov scans cloud infrastructure configurations to find misconfigurations before they're deployed.
Resource verification
Verify changes to hundreds of supported resource types in all major cloud providers.
Supported frameworks
Checkov supports developers using Terraform, Terraform plan, CloudFormation, Kubernetes, ARM Templates, Serverless, Helm, and AWS CDK.
Attribute policies
Scan cloud resources in build-time for misconfigured attributes with a simple Python policy-as-code framework.
Graph policies
Analyze relationships between cloud resources using Checkov’s graph-based YAML policies.
Custom policies
Extend Checkov to define your own custom policies, providers, and suppressions terms.

Pros and cons

Pros

Supports a wide range of IaC frameworks and cloud providers for comprehensive scanning.
Open source with community contributions enabling extensibility and custom policies.
Integrates seamlessly into CI/CD pipelines for automated security checks.
Provides both attribute-based and graph-based policy analysis for thorough misconfiguration detection.
Allows live testing and modification of scan parameters in terminal for flexible usage.

Cons

No explicit pricing or enterprise plans detailed on the website.
Primarily command-line interface based, which may have a learning curve for non-developers.
Limited information on GUI or dashboard features for scan result visualization.
May require Python knowledge to create advanced custom policies.
Focuses on infrastructure code scanning but does not cover runtime security or application code vulnerabilities.

Developer features

Command line interface
Checkov uses a common command line interface to manage and analyze infrastructure as code (IaC) scan results across platforms such as Terraform, CloudFormation, Kubernetes, Helm, ARM Templates and Serverless framework.

You?

Be the first to rate Checkov

Your review helps others make better decisions. No account needed. Takes about 10 seconds.

Featured Video

See Checkov at work before you try it.

Watch on YouTube

0 questions

Checkov

Overview

What Checkov has

For developers

Key Features

Infrastructure scanning

Resource verification

Supported frameworks

Attribute policies

Graph policies

Custom policies

Pros and cons

Pros

Cons

Developer features

Command line interface

Be the first to rate Checkov

Featured Video

Frequently Asked Questions

What Checkov has

For developers

Key Features

Infrastructure scanning

Resource verification

Supported frameworks

Attribute policies

Graph policies

Custom policies

Pros and cons

Pros

Cons

Developer features

Command line interface

Be the first to rate Checkov

Featured Video

Frequently Asked Questions

More in Software Development

More in Software Development