Clair
Clair: A focused self-hosted scanner for OCI and Docker image vulnerabilities. Ranked #16 of 26 in Container Security Software by our editors (7.3/10); pricing: Free plan; best for teams needing a focused self-hosted image scanner.
At a glance
- Editor score7.3 / 10
- PricingFree plan
- Best forTeams needing a focused self-hosted image scanner
- Free planYes
- Paid fromNone
- Image scanningYes
- Facts checked22 Sep 2026
Where it wins
- Free and open source for static OCI and Docker image analysis
- Detects operating-system packages and language-specific dependencies
- Supports REST API, clairctl, CI, registry, and disconnected deployments
Where it doesn't
- Focuses on static analysis rather than runtime protection
- Does not provide Kubernetes security or admission control
- Does not generate SBOMs
Our verdict on Clair
Clair is an open-source container security project for teams that need static vulnerability analysis of OCI and Docker images. It indexes image manifests and layers, identifies operating-system packages and language-specific dependencies, and matches them against vulnerability data. Clair can run as a binary or container in monolithic or distributed modes, making it suitable for container registries, local environments, CI pipelines, and disconnected deployments. Its API and clairctl command-line tool support image submission and vulnerability reporting.
The product’s strongest fit is its focused scanning workflow. Continuous vulnerability database updates support image re-analysis, while modular indexer, matcher, notifier, and combo modes allow different deployment designs. Integrations include PostgreSQL, Docker, Podman, OCI Distribution, and Docker v2. Teams can use REST reporting or clairctl, with deployment options spanning self-hosted and API-based operation. This makes Clair a practical choice for organizations that want control over where analysis runs and how it connects to existing container workflows.
Clair is free and open source, so its value comes from its scanning scope and deployment flexibility rather than commercial plan tiers. Its boundaries are important: the published capabilities center on static image analysis, package and dependency detection, and reporting. Runtime protection, Kubernetes security, admission control, and SBOM generation are outside that focus. Choose Clair when a self-hosted image scanner is the priority; choose another product when container security requires runtime controls, Kubernetes policy enforcement, or SBOM generation alongside vulnerability analysis.
Clair pricing
Clair fact sheet
| Free plan | Yes |
|---|---|
| Paid from | None |
| Image scanning | Yes |
| Runtime protection | No |
| Kubernetes security | Not verified |
| Registry scanning | Yes |
| Admission control | Not verified |
| SBOM generation | Not verified |
| Deployment model | Self_hosted |
| Deployment | Cloud, Self-hosted |
| Support | Community, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 3 integrations: Container registries, OCI registries, Docker registries |
| Pricing | Free plan |
| Website | clairproject.org |
| Facts checked | 22 Sep 2026 |
Clair integrations
Clair lists 3 integrations on its own site.
- Container registries
- OCI registries
- Docker registries
Alternatives to Clair
- Trend Vision One Container SecurityBroad container security coverage with transparent usage-based pricing.9.2
- Qualys Container SecurityBroad container coverage with a free visibility tier and sales-led paid access.9.1
- Wiz Container and Kubernetes SecurityA broad cloud security platform for prioritizing container and Kubernetes risks.9.0
Also listed in
Used Clair? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Clair for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Clair is listed in our Container Security Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/clair/"><img src="https://www.itechguides.com/best/badge/clair.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. We may earn a commission when you click some links. How we rank.
Last updated · How we research and update