Compare products
Put two or three cybersecurity products side by side and see how they differ on deployment, pricing, features, integrations and compliance.
| Product | Grype by Anchore View product | Aqua Trivy View product |
|---|---|---|
| Overview | ||
| What it is | Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives. | Aqua Trivy: OS & language package CVE scanning and IaC misconfiguration checks. Built for container vulnerability scanning. Compare Container Security alternatives. |
| Product type | Open Source Vulnerability Scanner | Open-Source Container & Cloud Security Scanner |
| Best for | Technology, Cross-industry, Open Source Community | Software Developers, DevOps, Enterprise Engineering |
| Pricing | ||
| Pricing model | Contact Vendor | Contact Vendor |
| Free trial | Free trial: yes | Free trial: yes |
| Deployment | ||
| Deployment options | Cloud | On-Premise |
| Deployment details | Command-line tool (local); CI/CD; Command-line tool | CLI; Containerized; CI/CD Native; Self-Hosted; CLI Binary; Docker Container; CI/CD Step |
| Data residency | Local (runs on user machine) | Local / Open-Source / Offline |
| Key features | ||
| What it offers |
|
|
| Platform & access | ||
| API access | API access: no | API access: yes |
| Single sign-on (SSO) | SSO: no | SSO: no |
| Role-based access (RBAC) | RBAC: no | RBAC: no |
| Multi-tenant | Multi-tenant: no | Multi-tenant: no |
| Mobile app | Mobile app: no | Mobile app: no |
| Supported platforms | LinuxmacOSWindowsDocker | LinuxmacOSWindowsDockerKubernetes Clusters |
| Compliance | Open Source (Apache 2.0)CIS Benchmarks | |
| Integrations & coverage | ||
| Integrations | SyftDockerPodmanGitHub ActionsGitLab CIJenkinsAnchore Enterprise | GitHub ActionsGitLab CIDockerKubernetesVS Code |
| Industries | TechnologyCross-industryOpen Source Community | Software DevelopersDevOpsEnterprise Engineering |
| Regions | Global | Global |
| Vendor | ||
| Company | Anchore | Aqua Security |
| Headquarters | Santa Barbara, California, USA | Boston, Massachusetts, USA |
| Company size | 51-200 | 501-1,000 |
| Founded | 2016 | 2015 |
Overview
What it is
Grype
Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.Aqua Trivy
Aqua Trivy: OS & language package CVE scanning and IaC misconfiguration checks. Built for container vulnerability scanning. Compare Container Security alternatives.Product type
Grype
Open Source Vulnerability ScannerAqua Trivy
Open-Source Container & Cloud Security ScannerBest for
Grype
Technology, Cross-industry, Open Source CommunityAqua Trivy
Software Developers, DevOps, Enterprise EngineeringPricing
Pricing model
Grype
Contact VendorAqua Trivy
Contact VendorFree trial
Grype
Free trial: yesAqua Trivy
Free trial: yesDeployment
Deployment options
Grype
Cloud
Aqua Trivy
On-Premise
Deployment details
Grype
Command-line tool (local); CI/CD; Command-line toolAqua Trivy
CLI; Containerized; CI/CD Native; Self-Hosted; CLI Binary; Docker Container; CI/CD StepData residency
Grype
Local (runs on user machine)Aqua Trivy
Local / Open-Source / OfflineKey features
What it offers
Grype
- Container image scanning
- File system and archive scanning
- SBOM input from Syft
- OS and language package support
- Auto-updating vulnerability database
- SARIF, JSON and CycloneDX output
- Severity-based build gates
- Container vulnerability scanning
Aqua Trivy
- OS & language package CVE scanning
- IaC misconfiguration checks
- Hardcoded secret detection
- SBOM generation
- CI/CD quality gates
- Container vulnerability scanning
- IaC misconfiguration audits
- Open-source supply chain security
Platform & access
API access
Grype
API access: noAqua Trivy
API access: yesSingle sign-on (SSO)
Grype
SSO: noAqua Trivy
SSO: noRole-based access (RBAC)
Grype
RBAC: noAqua Trivy
RBAC: noMulti-tenant
Grype
Multi-tenant: noAqua Trivy
Multi-tenant: noMobile app
Grype
Mobile app: noAqua Trivy
Mobile app: noSupported platforms
Grype
LinuxmacOSWindowsDocker
Aqua Trivy
LinuxmacOSWindowsDockerKubernetes Clusters
Compliance
Grype
Aqua Trivy
Open Source (Apache 2.0)CIS Benchmarks
Integrations & coverage
Integrations
Grype
SyftDockerPodmanGitHub ActionsGitLab CIJenkinsAnchore Enterprise
Aqua Trivy
GitHub ActionsGitLab CIDockerKubernetesVS Code
Industries
Grype
TechnologyCross-industryOpen Source Community
Aqua Trivy
Software DevelopersDevOpsEnterprise Engineering
Regions
Grype
Global
Aqua Trivy
Global
Vendor
Company
Grype
AnchoreAqua Trivy
Aqua SecurityHeadquarters
Grype
Santa Barbara, California, USAAqua Trivy
Boston, Massachusetts, USACompany size
Grype
51-200Aqua Trivy
501-1,000Founded
Grype
2016Aqua Trivy
2015