Security

Trivy

Open-source vulnerability scanner for containers and code

Visit Trivy
★4.7rating150 viewsPricing · FreeHot
The FalcoScan Intel PanelTrivy · Security
Data updated 2 November 2026
Opportunity
High
Band
Saturation
Open
Band
Wrapper risk
Low
Band
Momentum
Hot
Market trend
Rating
4.7
of 5 · FalcoScan rating

Security AI has a wide moat on average, from the moat scores of its rated products. What protects Security AI tools, and the widest moats

The Brief

What Trivy does

Trivy finds vulnerabilities in container images, filesystems, Git repos, and Kubernetes with a single command.

How Trivy compares with its closest alternatives

All 5 closest alternatives have a free plan, as Trivy does. All 5 offer an API, as Trivy does. Trivy offers a desktop app. Of the alternatives, 4 offer a desktop app. Trivy was founded in 2019; the alternatives were founded between 2011 and 2020, 2 of them earlier. Trivy is based in Ramat Gan, Israel; all the 2 alternatives with a known headquarters are in Israel too.

Market position · Security

How Trivy compares in Security

Trivy has high opportunity and sits in the top third of 361 live Security tools on FalcoScan. Across Security, the average opportunity score is 70.4 and the average saturation score 33. FalcoScan rates Trivy's own market position as open. 121 of the 361 operating Security tools have hot momentum, and FalcoScan has recorded 1 shutdown in the category.

Trivy compared with its closest alternatives
ProductOpportunitySaturationPricingPricing fromFree planAPIPlatformsMomentum
TrivyFounded 2019 · Ramat Gan, IsraelHighOpenFree—YesYesDesktopHot
GrypeFounded 2020 · Remote-firstLowOpenFree—YesYesDesktopRising
MendFounded 2011 · Tel Aviv, IsraelModerateContestedFreemium—YesYesWebRising
Aqua SecurityFounded 2015 · Tel Aviv, IsraelModerateContestedFreemium—YesYesWeb, DesktopRising
SyftFounded 2020 · Remote-firstModerateOpenFree—YesYesDesktopHot
NucleiFounded 2020ModerateOpenFree—YesYesDesktopHot

Exact opportunity and saturation scores for all 6 of these, and where each ranks in Security.

See them free for 7 days
What it ships with

Capabilities & who uses it

The capabilities Trivy exposes to builders and the verticals it currently serves.

AI Capabilities
Vulnerability DetectionClassification
Industry Verticals
Technology
Tagged

Trivy shows up when builders search for these

open-sourcevulnerability-scannercontainerskubernetes
Similar tools · Security

Alternatives to Trivy

Products still running that do the same job, from the security market and related ones, closest match first.

See the Security market
Security
Grype

Fast open-source vulnerability scanner for container images

★ 4.5Opportunity Low
Free
Security
Mend

Application security platform with SCA and SAST

★ 4.4Opportunity Moderate
Freemium
Security
Aqua Security

Full lifecycle cloud-native security platform

★ 4.5Opportunity Moderate
Freemium
Security
Syft

Generate software bill of materials for any container or codebase

★ 4.5Opportunity Moderate
Free
Security
Nuclei

Fast customizable vulnerability scanner with community templates

★ 4.6Opportunity Moderate
Free
Security
Snyk Container

Container and Kubernetes vulnerability scanning from Snyk

★ 4.6Opportunity Moderate
Freemium
Featured in
Questions

Trivy: common questions

Is Trivy free?

Yes. FalcoScan lists Trivy as free to use.

What are the best alternatives to Trivy?

The closest alternatives to Trivy that are still running, matched on the AI capabilities, uses and audience they share, are Grype, Mend, Aqua Security, Syft, and Nuclei.

Is Trivy still running?

Yes. As of 2 November 2026, FalcoScan lists Trivy as operating at trivy.dev.

Where is Trivy based?

Trivy is headquartered in Ramat Gan, Israel.

Does Trivy have an API?

Yes. Trivy offers an API.

Who is Trivy for?

Trivy is built for developers and devops.

How do I sign in to Trivy?

Sign in on Trivy's own website, trivy.dev. FalcoScan reviews Trivy but does not run its accounts, so logins, passwords and billing are handled by Trivy directly.

Back to Browse