# Checkov IaaC security scanner. Source: [Console review]() Website: [https://www.checkov.io/]() Profile updated: 2026-10-16 Category: [Vulnerability management]() ## Supported tech stack Research checked: 2026-10-11 ### Integrates with - AWS CDK (Integration) - AWS CloudFormation (Integration) - Helm (Integration) - Kubernetes (Integration) - Python (Language) - Terraform (Integration) Source: [Research source]() Documented compatibility; coverage may be incomplete. Written in describes implementation, not user-project language support. Official page documents Python policy extensions and Terraform, CloudFormation, Kubernetes, Helm, ARM, Serverless and AWS CDK scanning. ## Console’s review — 2023-11-16 Reviewed: 2023-11-16 Author: [David Mytton]() Citation: [This review]() ### What we like Scans infrastructure as code configs e.g. Terraform, CloudFormation, k8s, Helm, Dockerfile for misconfigurations. Large out of the box library. Can integrate with IDE and CI to help catch issues ideally as you write them, but definitely before they go to prod. ### Tradeoffs Conflicts with TFSec if you’re using Terraform, so best not to use them combined - pick one or the other. This review reflects Console’s assessment at publication on 2023-11-16. Features and limitations may have changed since the review date. ## Is Checkov a fit? Based on [Console’s review published on 2023-11-16](). Summary updated: 2026-10-16 ### Who it’s for Developers using infrastructure as code tools should consider Checkov for security scanning ### Why consider it Checkov can scan infrastructure as code configurations for misconfigurations ### Keep in mind Checkov may conflict with other security tools like TFSec when using Terraform [Selection criteria]() · [About Console]() · [Browse tools]()