Vulnerability Detection

Trivy – comprehensive and versatile security scanner

Last Updated on March 1, 2026

Trivy is a comprehensive and versatile security scanner. Trivy has scanners that look for security issues, and targets where it can find those issues.

Targets (what Trivy can scan):

  • Container Image
  • Filesystem
  • Git Repository (remote)
  • Virtual Machine Image
  • Kubernetes

Scanners (what Trivy can find there):

  • OS packages and software dependencies in use (SBOM)
  • Known vulnerabilities (CVEs)
  • IaC issues and misconfigurations
  • Sensitive information and secrets
  • Software licenses

Website: github.com/aquasecurity/trivy-operator
Support:
Developer: Aqua Security
License: Apache License 2.0

Trivy is written in Go. Learn Go with our recommended free books and free tutorials.


Related Software

Vulnerability Detection Tools
MetasploitPenetration testing framework
NucleiFast and customisable vulnerability scanner
OpenVASFull-featured vulnerability scanner
NiktoWeb server scanner
LynisAuditing, system hardening, compliance testing
grypeVulnerability scanner for container images and filesystems
OSSECCentralized architecture for monitoring and managing multiple systems
OpenSCAPNIST Certified SCAP 1.2 toolkit
octoscanStatic vulnerability scanner for GitHub action workflows
GreenboneCentral management service between security scanners and the user clients.
TerrapinTerrapin Vulnerability Scanner for the Terrapin attack
TigerSecurity audit and intrusion detection too
PRSWeb security scanner
TrivyTerrapin Vulnerability Scanner for the Terrapin attack

Read our verdict in the software roundup.


Best Free and Open Source Software Explore our comprehensive directory of recommended free and open source software. Our carefully curated collection spans every major software category.

This directory is part of our ongoing series of informative articles for Linux enthusiasts. It features hundreds of detailed reviews, along with open source alternatives to proprietary solutions from major corporations such as Google, Microsoft, Apple, Adobe, IBM, Cisco, Oracle, and Autodesk.

You’ll also find interesting projects to try, hardware coverage, free programming books and tutorials, and much more.

Know a useful open source Linux program that we haven’t covered yet? Let us know by completing this form.
Subscribe
Notify of
guest
0 Comments
Oldest
Newest Most Voted
Inline Feedbacks
View all comments