tfsec is a static security scanner for Terraform configurations. It checks code for security issues, misconfigurations, insecure defaults, and compliance violations before you apply the infrastructure. The scanner is aimed at DevOps and platform engineers who manage Terraform, and it works on the configuration files in a repository. The project is hosted on GitHub under the Aqua Security organization.
How Tfsec compares with its closest alternatives
All 5 closest alternatives have a free plan, as Tfsec does. All 5 offer an API, as Tfsec does. Tfsec offers a desktop app. Of the alternatives, 3 offer a desktop app. Tfsec was founded in 2019; the alternatives were founded between 2019 and 2022. Tfsec has no single headquarters on record, and 1 of its alternatives is also distributed.
Market position · Security
How Tfsec compares in Security
Tfsec has moderate opportunity and sits in the bottom third of 361 live Security tools on FalcoScan. Across Security, the average opportunity score is 70.4 and the average saturation score 33. FalcoScan rates Tfsec's own market position as contested. 121 of the 361 operating Security tools have hot momentum, and FalcoScan has recorded 1 shutdown in the category.
The closest alternatives to Tfsec that are still running, matched on the AI capabilities, uses and audience they share, are Checkov, Spacelift, Kyverno, Mondoo, and Checkov IaC Security.
Is Tfsec still running?
Yes. As of 2 November 2026, FalcoScan lists Tfsec as operating at github.com.
Where is Tfsec based?
Tfsec has no single headquarters: FalcoScan's records list it as a distributed, remote-first company.
Does Tfsec have an API?
Yes. Tfsec offers an API.
Who is Tfsec for?
Tfsec is built for devops and platform engineers.
How do I sign in to Tfsec?
Sign in on Tfsec's own website, github.com. FalcoScan reviews Tfsec but does not run its accounts, so logins, passwords and billing are handled by Tfsec directly.