Join us

ContentUpdates and recent posts about checkov..
Discovery IconThat's all about @checkov — explore more posts below...
 Activity
@secuodsoft started using tool MySQL , 22 hours, 34 minutes ago.
 Activity
@secuodsoft started using tool Kubernetes , 22 hours, 34 minutes ago.
 Activity
@secuodsoft started using tool Jenkins , 22 hours, 34 minutes ago.
 Activity
@secuodsoft started using tool Docker , 22 hours, 34 minutes ago.
 Activity
@secuodsoft started using tool Python , 22 hours, 37 minutes ago.
 Activity
@secuodsoft started using tool PHP , 22 hours, 37 minutes ago.
 Activity
@secuodsoft started using tool Node.js , 22 hours, 37 minutes ago.
 Activity
@secuodsoft started using tool MongoDB , 22 hours, 37 minutes ago.
 Activity
@secuodsoft started using tool Java , 22 hours, 37 minutes ago.
 Activity
@secuodsoft created an organization Secuodsoft , 22 hours, 40 minutes ago.
Checkov, created by Bridgecrew (now part of Palo Alto Networks), is an open source policy-as-code scanner for infrastructure-as-code frameworks. It analyzes Terraform, Kubernetes manifests, CloudFormation, Serverless, ARM, Docker, and other IaC formats to detect security, compliance, and configuration issues. Checkov uses a large library of built-in policies mapped to standards like CIS, PCI, SOC2, and NIST, and supports custom policies written in Python or YAML. It integrates seamlessly with CI pipelines, Git repos, and developer workflows, helping teams enforce secure-by-default cloud configurations before deployment. Its coverage, speed, and extensibility make it a flagship tool in cloud DevSecOps.