Grype
Scan container images and filesystems for known vulnerabilities.
What’s included for free?
Grype is ongoing-free under Apache-2.0 with no provider image quota; vulnerability databases and scans run locally.
Where it runs: Self-hosted
Provider information ↗Checked 2026-11-01
Before you use it
Apache-2.0 covers Grype; its logo is CC-BY-4.0. Images, databases and CI services retain separate terms.
Provider terms can change. Check current pricing and usage rights before starting a project.