Your next superpower is closer than you think. Find your superpowers
superpowers✳ My kit 0My account ↗
New to the power shelfSecurity tools

Documentation reviewed · 2026-10-07
Not connection-tested or security-audited.

What this means ↗
Aqua Security · Security tools

Trivy

Scan supported artifacts for vulnerabilities, misconfigurations and exposed secrets.

Developers
Explore publisher & setup ↗
Hosting
Local / CI
Setup style
Technical setup
Cost
Check current provider pricing, app subscriptions and usage charges.
Compatibility
Confirm your client, version and plan in the publisher’s setup instructions.
Permissions
The scanner reads the specified artifacts and may download vulnerability data. A scan cannot prove security.
A thoughtful first stepStart with a small task and permitted test data. Review the requested access, and require approval before actions that change external data.

Pricing & publisher resources

Pricing not verified · Check provider

Check current terms with the publisher before purchasing.

Own this tool? Claim or update it ↗

Keep this listing useful.

Sign in to keep a private watchlist. Email updates require a separate opt-in in your account.

Report outdated pricing, a broken link or a discontinued tool

Reports are private to you and the review team. A report does not automatically change or remove a listing.

Task fit & availability

A first task to try

Scan a test container image and inspect one actionable finding.

Limitations to check

Check database freshness, severity context and whether a fix is available.

Availability not independently verified

A directory listing is not a live uptime guarantee. Check the official publisher before relying on the tool.

Find alternatives for your task ↗

Questions for this tool

Loading reviewed questions…

Ask a question about Trivy

Sign in with your email in another tab to ask or vote without losing this draft. Your email stays private. Do not include confidential information; approved questions are public.

KNOW YOUR SUPERPOWER

From discovery to your first useful result.

Editorial guidance for evaluating this kind of tool. Suggested tasks have not been independently tested.

01 · WHAT IT IS

A tool that helps inspect a particular class of issue. Its scope and findings need to be understood before acting on them.

02 · WHAT YOU NEED

Identify what the tool checks, what files or systems it reads and how to interpret its output.

03 · A FIRST TASK TO TRY

Scan a test container image and inspect one actionable finding.

04 · YOUR REVIEW CHECKPOINT

Check database freshness, severity context and whether a fix is available.

EXPLORE YOUR OPTIONS

Related tools to investigate.

Matched by category or role. These suggestions are not tested equivalents.

MAKE IT USEFUL

Give it a routine.