Grype scans container images and filesystems for known CVEs instantly — part of the Anchore toolchain, integrates with CI/CD pipelines and works offline with a downloaded vulnerability DB.
How Grype compares with its closest alternatives
All 5 closest alternatives have a free plan, as Grype does. All 5 offer an API, as Grype does. Grype offers a desktop app. Of the alternatives, 3 offer a desktop app. Grype was founded in 2020; the alternatives were founded between 2011 and 2020, 4 of them earlier. Grype has no single headquarters on record; its alternatives with a known headquarters are in Israel.
Market position · Security
How Grype compares in Security
Grype has low opportunity and sits in the bottom third of 361 live Security tools on FalcoScan. Across Security, the average opportunity score is 70.4 and the average saturation score 33. FalcoScan rates Grype's own market position as open. 121 of the 361 operating Security tools have hot momentum, and FalcoScan has recorded 1 shutdown in the category.
The closest alternatives to Grype that are still running, matched on the AI capabilities, uses and audience they share, are Trivy, Mend, Nuclei, Aqua Security, and Cycode.
Is Grype still running?
Yes. As of 1 November 2026, FalcoScan lists Grype as operating at github.com.
Where is Grype based?
Grype has no single headquarters: FalcoScan's records list it as a distributed, remote-first company.
Does Grype have an API?
Yes. Grype offers an API.
Who is Grype for?
Grype is built for devops and security teams.
How do I sign in to Grype?
Sign in on Grype's own website, github.com. FalcoScan reviews Grype but does not run its accounts, so logins, passwords and billing are handled by Grype directly.