Grype
by AnchoreVerified
Grype offers container image scanning, file system and archive scanning and SBOM input from Syft. Use it for CI/CD security gates. See Container Security alternatives.
- Product Type
- Open Source Vulnerability Scanner
- Deployment
- Cloud
- Industries
- 3+ industries
- Regions
- Global
- Free Trial
- Yes
- Pricing
- Contact Vendor
About Grype
Grype is a free, open source vulnerability scanner for container images and file systems, created and maintained by Anchore. It is widely used by developers and DevSecOps teams because it is fast, easy to install and works well in CI/CD pipelines.
Categories & Subcategories
Key Features
7 capabilities that Grype offers.
File system and archive scanning
SBOM input from Syft
OS and language package support
Auto-updating vulnerability database
SARIF, JSON and CycloneDX output
Severity-based build gates
Use Cases
Container vulnerability scanning
CI/CD security gates
SBOM vulnerability analysis
Developer security checks
Industries Served
Grype is used across 3+ industries.
Technology
Cross-industry
Open Source Community
Regions
Global
Integrations
Works with the tools teams already use
Syft
Docker
Podman
GitHub Actions
GitLab CI
Jenkins
Anchore Enterprise
Deployment Options
Flexible deployment to meet your needs
Cloud
Platform & Access
What Grype supports, at a glance.
- API accessNo
- Single sign-on (SSO)No
- Role-based access (RBAC)No
- Multi-tenantNo
- Mobile appNo
- Supported platforms
- LinuxmacOSWindowsDocker
- Operating systems
- LinuxmacOSWindows
- Browser support
- Not applicable (CLI tool)
- Languages supported
- English
- Data residency
- Local (runs on user machine)
- Deployment details
- Command-line tool (local); CI/CD; Command-line tool
Grype Reviews
No reviews yet
Be the first to share your experience with Grype.
More Products from Anchore
View all →Anchore SBOM
Get the facts on Anchore SBOM: SBOM generation via Syft and third-party SBOM import. Built for SBOM compliance. Compare it with other SBOM options before you decide.
Syft
Evaluating Syft? See how this SBOM tool handles license detection, format conversion and cosign attestations, where it fits best and which alternatives to compare.
Anchore Enterprise
Anchore Enterprise from Anchore focuses on SBOM management. Key capabilities: policy engine. Compare it with the leading Software Supply Chain Security alternatives.
Product Resources
Explore More Products
Other cybersecurity products listed on Cyber Rank.
Aqua Trivy
Aqua Trivy: OS & language package CVE scanning and IaC misconfiguration checks. Built for container vulnerability scanning. Compare Container Security alternatives.
DevSecOps & Software Supply ChainView details
Docker Scout
byDocker
Docker Scout from Docker focuses on base image updating. Key capabilities: CI/CD integration. Compare it with the leading Container Security alternatives.
DevSecOps & Software Supply ChainView details
JFrog Xray
byJFrog
JFrog Xray from JFrog focuses on Vulnerability Scan. Key capabilities: component graphs and automated SBOM generation. Compare it with the leading SCA alternatives.
DevSecOps & Software Supply ChainView details
JFrog Advanced Security
byJFrog
JFrog Advanced Security is a binary-level software supply chain defense for Contextual CVE Analysis. See features and Software Supply Chain Security alternatives.
DevSecOps & Software Supply ChainView details