Skip to content
SecArsenal
Educational and ethical use only. Only test systems you own or are explicitly authorized to test. Full disclaimer.

Checkov (T)

Infrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.

cloud-infrastructure
Official docs ↗

Platforms: Web · Last verified September 7, 2026

Infrastructure-as-code security scanner that checks Terraform, CloudFormation, Kubernetes, and other cloud configs against policy rules.

Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.

Getting started

Best for: Shift-left cloud misconfiguration detection in IaC repositories. See the official site linked above for details.