Home › Security & encryption tools › Trivy

Trivy

All-in-one vulnerability & misconfig scanner

provisional — pending verificationApache-2.0self-hostable

Value Index

4.5 / 5

Transparency4

Value density5

Privacy5

Efficiency4

Visit site ↗ Self-host with ValueIndex — join waitlist

Plain outbound link — no affiliate parameters, no tracking redirects.

Why it's listed

Trivy is listed in security & encryption tools because it competes on utility: all-in-one vulnerability & misconfig scanner. Its funding model is disclosed on the listing. Licensed Apache-2.0; pricing: free. Technically it's lean — it runs comfortably on modest hardware, which is exactly the proof-of-work efficiency we rank for. This entry is provisional — the scores are seeded estimates pending our full manual rubric pass, and the verification date will appear here once complete.

Facts

License: Apache-2.0
Pricing: Free
Funding model: Aqua Security OSS
Self-hostable: Yes
Verification: Provisional — scores are seeded estimates pending manual verification

Evidence notes

Candidate for our v2 verification pipeline

Also in security & encryption tools

age (4.8) — Simple, modern file encryption
SOPS (4.8) — Encrypted secrets in git you can diff

Spotted a problem — trackers added, dark patterns, abandonment? Report a violation. Scores change when evidence does.