Experience the Power of Agentic AI With Checkmarx One Assist
See the Future
Experience the Power of Agentic AI With Checkmarx One Assist
See the Future
By Checkmarx
KICS (Keeping Infrastructure as Code Secure) is a free, open source solution for static code analysis of IaC.
KICS help you find vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle.
M+
Docker Pulls (Downloads)
+
Fully Customizable Rules and Queries
+
IaC Platforms Supported
+
Languages and Formats Supported
Download KICS and protect your entire organization from flaws and misconfigurations.
KICS identifies security vulnerabilities, compliance issues, and misconfigurations in IaC solutions
like Terraform, Kubernetes, Docker, AWS CloudFormation, Ansible, and Helm. It also supports OpenAPI 3.0 with over 2,400 editable queries.
Checkmarx’ KICS is an open-source tool for scanning Infrastructure as Code (IaC) to detect misconfigurations and vulnerabilities before deployment. KICS is free, and simple to integrate.
Automate, Detect, and Protect
KICS, is an open source community powered tool that protects your cloud infrastructure. It scans IaC files for misconfigurations and security risks before deployment.
Free, Fast, Scalable Open Source Scanning
Integrate and protect your apps, data, and services effortlessly. KICS enforces IaC security automatically, reducing risk and ensuring secure configurations.
Enforcing API Design Best Practices
KICS secures APIs by spotting misconfigurations in paths, authentication, and encryption. It automatically scans during builds, safeguarding your apps without slowing down development.
Built for Scale
KICS scales with your development, extending IaC security scans easily. Its modular design lets you add new checks, expand operations, and protect your stack—all without slowing down delivery.
KICS, is an open source community powered tool that protects your cloud infrastructure. It scans IaC files for misconfigurations and security risks before deployment.
Integrate and protect your apps, data, and services effortlessly. KICS enforces IaC security automatically, reducing risk and ensuring secure configurations.
KICS secures APIs by spotting misconfigurations in paths, authentication, and encryption. It automatically scans during builds, safeguarding your apps without slowing down development.
KICS scales with your development, extending IaC security scans easily. Its modular design lets you add new checks, expand operations, and protect your stack—all without slowing down delivery.
Developed by Checkmarx and the open source community, KICS is simple to install, run, and integrate into your CI, and understanding your results is straightforward.