Clair

Clair is ranked #22 of 27 in container image scanning tools on The Geeks Club. It runs on API, Linux, Self-hosted. There is a free plan.

Clair plans and pricing

Clair Free Open source · self-hosted container vulnerability analysis github.com · 4 Oct 2026

Compared on container image scanning tools

Free plan: Yes
Deployment model: self_hosted
Registry scanning: Yes
SBOM generation: Yes

Best Clair alternatives

7.8 Qualys External Attack Surface Management Free trial

7.4 Snyk Open Source Free plan

7.3 Docker Desktop Free plan

7.2 Aqua Container Security Free trial

7.2 Mondoo CSPM Free plan

7.1 Grype Free plan

Clair

Purpose: Clair is an open source project for static analysis of vulnerabilities in application containers, including OCI and Docker images.
Analysis mode: Clair parses image contents and reports vulnerabilities using static analysis rather than runtime analysis.
Workflow: Clients submit container image manifests to the Clair API for indexing and vulnerability matching.
Indexing: Clair fetches image layers, scans their contents, and returns a persisted IndexReport.
Deduplication: Clair uses content-addressed OCI manifests and layers to reduce duplicated indexing work.
Current vulnerability data: Clair continually ingests security data, and matcher requests provide up-to-date vulnerability analysis for an IndexReport.
Notifications: The notifier checks whether newly discovered vulnerabilities affect indexed manifests and acts according to its configuration.
Supported image contents: The documented support matrix lists Ubuntu, Debian, RHEL, SUSE, Oracle, Alpine, AWS Linux, VMware Photon, and Python base containers.
Engine: Clair v4 uses the ClairCore library as its engine for examining image contents and reporting vulnerabilities.
Security data update: The v4.9.0 release notes state that ClairCore switched to NVD 2.0 JSON feeds for CVSS enrichment data.
Output format: The v4.9.0 release notes state that ClairCore can encode index reports as SPDX 2.3 documents.
License: The project is licensed under Apache 2.0.
Support: The project README lists a mailing list, an IRC channel, and GitHub issues as community contact options.
Stable builds: The README warns that the main branch may be unstable or broken and directs users to releases for stable binaries.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Container Image Scanning Tools in 2026#22 of 27

Is Clair yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Clair

Sources

github.com/quay/clair· checked 4 Oct 2026
quay.github.io/clair/· checked 4 Oct 2026
github.com/quay/clair/releases· checked 4 Oct 2026