KICS
KICS: A free CLI for broad IaC scanning, customizable policies, secrets detection, and CI/CD reporting. Ranked #9 of 25 in Infrastructure Policy as Code Tools by our editors (8.5/10); pricing: Free plan; best for broad IaC static analysis.
At a glance
- Editor score8.5 / 10
- PricingFree plan
- Best forBroad IaC static analysis
- Free planYes
- Paid fromFree
- Policy testingYes
- Founded2006 · Ramat Gan, Israel
- Facts checked20 Sep 2026
Where it wins
- Scans Terraform, Kubernetes, Docker, CloudFormation, and many more formats
- Customizable OPA Rego queries support tailored policy checks
- CI/CD integrations, secrets scanning, reports, and automatic remediation
Where it doesn't
- Command-line tool rather than a metered commercial SaaS product
- Custom policy development requires familiarity with OPA Rego
- Remediation is provided through a command rather than an end-to-end workflow
Our verdict on KICS
KICS, or Keeping Infrastructure as Code Secure, is an open-source command-line tool from Checkmarx for teams that need static analysis across infrastructure and deployment files. It detects security vulnerabilities, compliance issues, misconfigurations, and secrets in technologies including Terraform, Kubernetes, Docker, AWS CloudFormation, Ansible, Helm, Pulumi, and others. Its cross-platform support covers Windows, macOS, and Linux, making it suitable for developers, platform teams, and security groups standardizing checks across varied infrastructure repositories.
KICS follows an open-source pricing model with a free plan rather than metered commercial SaaS tiers. The published capabilities include OPA Rego-based customizable queries, policy testing, CI/CD integration, policy reporting, and an automatic remediation command. Findings can be exported in JSON, SARIF, HTML, PDF, CSV, JUnit, and other formats. This gives teams flexibility in how they review results, feed findings into development systems, and retain reports for security or compliance processes.
Its ecosystem fit is a central strength. KICS integrates with Azure Pipelines, Bamboo, Bitbucket Pipelines, CircleCI, Codefresh, GitHub Actions, GitLab CI, Jenkins, TeamCity, Travis CI, pre-commit hooks, Terraform Cloud, Terraformer, AWS CodeBuild, and Visual Studio Code. The format coverage also extends to Google Deployment Manager, AWS SAM, Microsoft ARM, Azure Blueprints, OpenAPI, Crossplane, Knative, and Serverless Framework. Choose KICS when broad format support and customizable policy scanning matter more than a hosted commercial product experience. Teams seeking a metered SaaS platform or avoiding Rego-based policy work should consider an alternative.
Your product? Our editors can test KICS in depth and publish a review, labelled as paid · from $149/mo →
KICS pricing
KICS fact sheet
| Free plan | Yes |
|---|---|
| Paid from | Free |
| Policy language | OPA Rego |
| IaC formats | Terraform, Kubernetes, Docker, AWS CloudFormation, Ansible, Helm, Google Deployment Manager, AWS SAM, Microsoft ARM, Azure Blueprints, OpenAPI, Pulumi, Crossplane, Knative, Serverless Framework |
| Policy testing | Yes |
| Admission control | Not verified |
| Runtime enforcement | Not verified |
| CI/CD integration | Yes |
| Policy reporting | Yes |
| Deployment | Self-hosted |
| Platforms | Windows, macOS, Linux |
| Support | Email, Community, Docs |
| Built for | Solo, Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 16 integrations: Azure Pipelines, Bamboo, Bitbucket Pipelines, CircleCI, Codefresh, GitHub Actions … See all → |
| Pricing | Free plan |
| Website | kics.io |
| Facts checked | 20 Sep 2026 |
KICS integrations
KICS lists 16 integrations on its own site.
- Azure Pipelines
- Bamboo
- Bitbucket Pipelines
- CircleCI
- Codefresh
- GitHub Actions
- GitLab CI
- Jenkins
- TeamCity
- Travis CI
- Pre-commit hooks
- Terraform Cloud
- Terraformer
- AWS CodeBuild
- Visual Studio Code
- AWS CDK
Alternatives to KICS
- TerraformA broad Terraform workflow for multi-cloud teams that need policy and state controls.9.4
- Azure PolicyA free Azure-native policy service with broad enforcement, remediation, and CI/CD coverage.9.3
- Open Policy AgentA broad, programmable policy engine for teams building policy platforms.9.1
Also Ranked In
KICS is ranked in 2 of our directories.
Used KICS? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used KICS for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
KICS is listed in our Infrastructure Policy as Code Tools directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/kics-infrastructure-policy-as-code-tool/"><img src="https://www.itechguides.com/best/badge/kics-infrastructure-policy-as-code-tool.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update