---
title: "KICS"
date: "2026-05-26T10:56:38+00:00"
url: "https://checkmarx.com/product/kics/"
---

# KICS

  By Checkmarx

# Open-Source IaC: Free, Fast, Scalable

KICS (Keeping Infrastructure as Code Secure) is a free, open-source solution for static code analysis of IaC.

 [Start using it now](#) [Learn More](#)

## Exposed secrets are a major AppSec attack vector

Enterprises are unintentionally exposing thousands of secret credentials every day, leading to cyberattacks, financial loss, and reputational damage. 2MS finds exposed secrets so that you can better protect your organization from attack.

 5.5M+

Docker Pulls (Downloads)

 2,400+

Fully Customizable Rules and Queries

 18+

IaC Platforms Supported

 75+

Languages and Formats Supported

## Find Out More

Download KICS and protect your entire organization from flaws and misconfigurations.

 [Download KICS](#)

 ![Gartner Logo - CTA Awards](https://checkmarx.com/wp-content/uploads/2026/06/Gartner-Logo-CTA-Awards.svg) A Gartner® Magic Quadrant Leader™

 ![Forrester](https://checkmarx.com/wp-content/uploads/2026/06/Forrester.svg) A Forrester Wave Leader™

 ![SOC2 Logo](https://checkmarx.com/wp-content/uploads/2026/06/SOC2-Logo.svg) SOC 2 Type II Certified

Platform

KICS identifies security vulnerabilities, compliance issues, and misconfigurations in IaC solutions like Terraform, Kubernetes, Docker, AWS CloudFormation, Ansible, and Helm. It also supports OpenAPI 3.0 with over 2,400 editable queries.

 ![platform-1](https://checkmarx.com/wp-content/uploads/2026/05/platform-1.svg)

 ![platform-2](https://checkmarx.com/wp-content/uploads/2026/05/platform-2.svg)

 ![platform-3](https://checkmarx.com/wp-content/uploads/2026/05/platform-3.svg)

 ![platform-4](https://checkmarx.com/wp-content/uploads/2026/05/platform-4.svg)

 ![platform-5](https://checkmarx.com/wp-content/uploads/2026/05/platform-5.svg)

 ![platform-6](https://checkmarx.com/wp-content/uploads/2026/05/platform-6.svg)

 ![platform-7](https://checkmarx.com/wp-content/uploads/2026/05/platform-7.svg)

Platform Capabilities

## Application Security That Prioritizes What Matters

Checkmarx One ASPM closes visibility gaps, eliminates redundant triage, and enables smarter prioritization with risk orchestration for faster, more efficient remediation.

  01  End-To-End Risk Coverage All scanners, one unified view    02  Connect to Your Dev Ecosystem IDEs, CI/CD, ticketing & more    03  Context-Enriched Risk Scoring Exploitability, reachability, exposure

Risk Coverage

### End-To-End Risk Coverage

Connect vulnerabilities from source to runtime by integrating findings from Checkmarx, third-party tools, and CNAPPs into one unified view of risk.

 ![placeholder](https://checkmarx.com/wp-content/uploads/2026/05/placeholder.webp)

Integrations

### Connect to Your Dev Ecosystem

Integrate with cloud tools, ticketing systems, and any IDE — bringing full ASPM context and best-fix-location guidance into existing workflows.

 ![placeholder](https://checkmarx.com/wp-content/uploads/2026/05/placeholder.webp)

Checkmarx Zero

### Context-Enriched Risk Scoring

Powered by Checkmarx Zero, blend exploitability, reachability, fixability, and runtime exposure into one aggregated risk score so you can prioritize and act based on real business risk.

 ![placeholder](https://checkmarx.com/wp-content/uploads/2026/05/placeholder.webp)

## Ready to secure what comes next?

See Checkmarx One in action with a personalized demo from our security experts.

 [Request a Demo](#) [Explore the Platfrom](#)

 ![Gartner Logo - CTA Awards](https://checkmarx.com/wp-content/uploads/2026/06/Gartner-Logo-CTA-Awards.svg) A Gartner® Magic Quadrant Leader™

 ![Forrester](https://checkmarx.com/wp-content/uploads/2026/06/Forrester.svg) A Forrester Wave Leader™

 ![SOC2 Logo](https://checkmarx.com/wp-content/uploads/2026/06/SOC2-Logo.svg) SOC 2 Type II Certified

## Additional Resources

KICS is powered by Checkmarx—the leader in application security — in partnership with the open-source community.

### Documentation

 [Read Now](#)

### Contribute

 [Read Now](#)

### Solution Brief

 [Learn More](#)

### KICS Roadmap

 [Learn More](#)

### GitHub Source

 [Download KICS](#)

## Find Out More

Download KICS and protect your IaC, your APIs, and your entire organization from flaws and misconfigurations.

 [Download KICS](#)

 ![Gartner Logo - CTA Awards](https://checkmarx.com/wp-content/uploads/2026/06/Gartner-Logo-CTA-Awards.svg) A Gartner® Magic Quadrant Leader™

 ![Forrester](https://checkmarx.com/wp-content/uploads/2026/06/Forrester.svg) A Forrester Wave Leader™

 ![SOC2 Logo](https://checkmarx.com/wp-content/uploads/2026/06/SOC2-Logo.svg) SOC 2 Type II Certified