Docker Bench (by Aqua) alternatives

Looking for an alternative tool to replace Docker Bench (by Aqua)? During the review of Docker Bench (by Aqua) we looked at other open source tools. Based on their category, tags, and text, these are the ones that have the best match.

Top 3

  1. Anchore (container analysis and inspection)
  2. bane (AppArmor profile generator)
  3. Dagda (vulnerability scanner for Docker containers)

These tools are ranked as the best alternatives to Docker Bench (by Aqua).

Alternatives (by score)

100

Anchore

Introduction

Anchore is a tool to help with discovering, analyzing and certifying container images. These images can be stored both on-premises or in the cloud. The tooling is mainly focused on developer so that perform analysis on their container images. Typical actions include running queries, creating reports, or set up policies for a continuous integration and deployment pipeline.

Project details

Anchore is written in Python.

Strengths and weaknesses

  • + More than 10 contributors
  • + Commercial support available
  • + The source code of this software is available

    Typical usage

    • System hardening

    Anchore review

    76

    bane

    Introduction

    Bane is a tool to create AppArmor profiles. This helps to secure applications by setting restrictions on resources they access or modify. A strict policy may help to prevent privilege escalation attacks.

    Project details

    bane is written in Golang.

    Strengths and weaknesses

    • + More than 500 GitHub stars
    • + The source code of this software is available

      Typical usage

      • Application security
      • Security monitoring
      • System hardening

      bane review

      60

      Dagda

      Introduction

      The main reasons to use Dagda is the detection of vulnerable or malicious components within your containerized environment.

      Project details

      Dagda is written in Python.

      Strengths and weaknesses

      • + The source code of this software is available

        Typical usage

        • Malware detection
        • Malware scanning
        • Vulnerability management
        • Vulnerability scanning

        Dagda review

        76

        Docker Bench for Security

        Introduction

        Docker Bench for Security is a small security scanner to perform several tests that are part of the Docker CIS benchmark.

        Project details

        Docker Bench for Security is written in shell script.

        Strengths and weaknesses

        • + More than 25 contributors
        • + Screen output is colored
        • + More than 3000 GitHub stars
        • + The source code of this software is available

          Typical usage

          • Application security
          • Configuration audit
          • Security assessment

          Docker Bench for Security review

          64

          DFWFW (Docker Firewall Framework)

          Introduction

          DFWFW, short of Docker Firewall Framework, offers easy administration of the iptables rules of Docker containers. It updates using event streams.

          Project details

          DFWFW is written in Perl.

          Strengths and weaknesses

          • + The source code of this software is available
          • - Full name of author is unknown

          Typical usage

          • Firewall management

          DFWFW review

          64

          Dockerscan

          Introduction

          Dockerscan is a Docker toolkit for security analysis which includes attacking tools. It is more focused on side of the offensive than defensive.

          Project details

          Dockerscan is written in Python.

          Strengths and weaknesses

          • + More than 500 GitHub stars
          • + The source code of this software is available

            Typical usage

            • Information gathering
            • Security assessment
            • Vulnerability scanning

            Dockerscan review

            100

            Lynis

            Introduction

            Lynis is an open source security auditing tool that is available since 2007 and created by Michael Boelen. Its primary goal is to evaluate the security defenses of systems running Linux or other flavors of Unix. It provides suggestions to install, configure, or correct any security measures.

            Project details

            Lynis is written in shell script.

            Strengths and weaknesses

            • + More than 50 contributors
            • + Commercial support available
            • + More than 4000 GitHub stars
            • + Used language is shell script
            • + Very low number of dependencies
            • + Project is mature (10+ years)
            • + The source code of this software is available

              Typical usage

              • IT audit
              • Penetration testing
              • Security assessment
              • System hardening
              • Vulnerability scanning

              Lynis review

              70

              subuser

              Introduction

              A tool like subuser can useful to test software from untrusted sources.

              Project details

              subuser is written in Python.

              Strengths and weaknesses

              • + More than 10 contributors
              • + More than 500 GitHub stars
              • + The source code of this software is available

                Typical usage

                • Software testing

                subuser review

                Some relevant tool missing as an alternative to Docker Bench (by Aqua)? Please contact us with your suggestion.