open sourceopen source · Apache-2.0last verified September 6, 2026official site ↗
At a glance
Trivy is a 100% free and open-source comprehensive security and vulnerability scanner under the Apache-2.0 license ($0). It offers unlimited scanning across containers, Kubernetes, IaC, and source code repositories with zero licensing fees. Aqua Security provides commercial enterprise platforms for runtime eBPF protection and CSPM via custom quote.
Self-hosting cost
Trivy is open source under the Apache-2.0 license. Self-hosting does not add a software license fee, but you still pay for infrastructure, operations, and any external model or API usage.
Trivy is a 100% free and open-source comprehensive security and vulnerability scanner under the Apache-2.0 license ($0). It offers unlimited scanning across containers, Kubernetes, IaC, and source code repositories with zero licensing fees. Aqua Security provides commercial enterprise platforms for runtime eBPF protection and CSPM via custom quote.
Does Trivy have a free plan?
Yes — Trivy is open source and free to use.
Can you self-host Trivy for free?
Trivy is open source under the Apache-2.0 license. Self-hosting does not add a software license fee, but you still pay for infrastructure, operations, and any external model or API usage.
What are free or cheaper Trivy alternatives?
OpenLIT, Cilium, OrbStack are in the same category with a free plan or open-source license.
pricing is editorial catalog data (last verified September 6, 2026) — vendors change plans; confirm on the official site before you buy. Reuse this data under CC-BY 4.0 via /data.