Clair
Clair: A self-hosted open-source scanner with indexing, notifications, and SPDX SBOM export. Ranked #25 of 30 in Container Image Scanning Tools by our editors (5.2/10); pricing: Free plan; best for teams building a self-hosted open-source scanner.
At a glance
- Editor score5.2 / 10
- PricingFree plan
- Best forTeams building a self-hosted open-source scanner
- Free planYes
- Paid fromNone
- Facts checked23 Sep 2026
Where it wins
- Supports static analysis for both OCI and Docker images
- Persists manifest and layer indexes as IndexReports
- Exports index reports as SPDX 2.3 SBOM documents
Where it doesn't
- Requires self-hosted deployment and operational ownership
- No verified integrations or CI and admission controls
- Remediation guidance is not part of its documented focus
Our verdict on Clair
Clair is an open-source service for statically analyzing vulnerabilities in OCI and Docker container images. Teams submit manifests through its API or the clairctl command-line tool; Clair indexes image layers, matches package contents against continually ingested security data, and can notify configured consumers when newly discovered vulnerabilities affect indexed manifests. Its audience spans small teams through enterprises that want to operate their own scanner on Linux or through an API.
The product follows a self-hosted, open-source model with a free plan rather than tiered subscriptions. Deployment can be shaped around separate indexer, matcher, and notifier services, or a combined mode, allowing teams to align the components with their operating model. Clair is distributed as source, binaries, and an official container image. Support resources include documentation, community channels, and email, while the platform scope centers on Linux, API access, and self-hosted operation.
Its standout capability is the connection between persistent indexing and vulnerability matching. Index reports retain manifest and layer analysis, and clairctl can generate manifests and vulnerability reports for command-line workflows. Clair also encodes index reports as SPDX 2.3 documents, giving teams a defined SBOM output alongside scanning and notifications. Choose Clair when you need an open-source foundation that you can host and integrate around OCI or Docker analysis. Teams that require explicitly documented CI pipeline scanning, Kubernetes admission enforcement, or remediation guidance should evaluate alternatives whose core workflows cover those needs.
Clair pricing
Clair fact sheet
| Free plan | Yes |
|---|---|
| Paid from | None |
| Deployment model | Self_hosted |
| Registry scanning | Yes |
| CI pipeline scanning | Not verified |
| Kubernetes admission | Not verified |
| SBOM generation | Yes |
| Fix recommendations | Not verified |
| Deployment | Self-hosted |
| Platforms | Linux |
| Support | Email, Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Pricing | Free plan |
| Website | github.com |
| Facts checked | 23 Sep 2026 |
Alternatives to Clair
- Snyk ContainerBroad image and Kubernetes scanning, with a free tier and paid options for teams.9.3
- Docker ScoutDocker Scout combines image scanning, SBOMs, CVE monitoring and policy controls.8.3
- Qualys Container SecurityEnd-to-end container governance spanning discovery, scanning, Kubernetes, and runtime.7.7
Used Clair? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Clair for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Clair is listed in our Container Image Scanning Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/clair-container-image-scanner/"><img src="https://www.itechguides.com/best/badge/clair-container-image-scanner.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Sep 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. It never changes a score or a verdict. How we rank.
Last updated · How we research and update