Deepfence ThreatMapper

Deepfence ThreatMapper is ranked #5 of 24 in container security software on The Geeks Club. It runs on API, Linux, Self-hosted, Web, Windows. There is a free plan.

Deepfence ThreatMapper plans and pricing

All plans

ThreatMapper Free no limits · no hidden features threatmapper.org · 30 Sept 2026

Compared on container security software

Free plan: Yes
Image scanning: Yes
Runtime protection: Yes
Kubernetes security: Yes
Registry scanning: Yes
SBOM generation: Yes
Deployment model: self_hosted

Best Deepfence ThreatMapper alternatives

See all 12

7.8 Qualys External Attack Surface Management Free trial

7.5 Snyk Open Source Free plan

7.4 Docker Desktop Free plan

7.3 Kubescape Free plan

7.2 RapidFort Free plan

7.1 Grype Free plan

Deepfence ThreatMapper

Purpose: ThreatMapper hunts for hidden threats in production platforms and ranks them by risk of exploit.
Workload discovery: It scans platforms to identify pods, containers, applications and infrastructure and maps their topology and attack surface.
SBOM vulnerability scanning: It generates runtime SBOMs for running pods, containers, serverless apps, applications and operating systems and matches them against multiple vulnerability feeds.
Secret detection: It detects exposed keys, tokens and passwords in containers and host filesystems.
Compliance: It evaluates infrastructure configuration against CIS, PCI-DSS, HIPAA and other compliance benchmarks.
Threat Graph: The Threat Graph correlates vulnerabilities, secrets and compliance issues with live and recent network flows, security groups and live status.
Management console: The standalone management console runs as containers on a Docker host or dedicated Kubernetes cluster and exposes HTTPS administration and API automation.
Integrations: Documented integrations include Slack, PagerDuty, Jira, Splunk, ELK, Sumo Logic and AWS S3.
CI/CD: Image-build scanning supports CircleCI, Jenkins and GitLab.
Sensor security: Sensor agents communicate with the management console over TLS using a URL and API key.
Deployment scope: A single console can manage multiple workload types and on-premise and cloud deployments simultaneously.
Sensor requirements: Sensor requirements include 0.2 CPU cores, 200 MB to 1 GB RAM, Linux kernel version 4.4 or newer and access to console port 443.
Windows support: Windows Server support is experimental and not suitable for production use.
Cloud scanning: Cloud Scanner tasks run locally through Terraform modules, use typically read-only cloud API access and do not listen for remote connections or control.
Price from: Free

Visit site Alternatives

Where it ranks on The Geeks Club

Best Container Security Software in 2026#5 of 24

Is Deepfence ThreatMapper yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote Deepfence ThreatMapper

Sources

threatmapper.org/threatmapper/docs/· checked 30 Sept 2026
threatmapper.org/threatmapper/docs/architecture/console/· checked 30 Sept 2026
threatmapper.org/threatmapper/docs/architecture/threatgr· checked 30 Sept 2026
threatmapper.org/threatmapper/docs/sensors/· checked 30 Sept 2026
threatmapper.org/threatmapper/docs/architecture/cloudsca· checked 30 Sept 2026
github.com/deepfence/ThreatMapper· checked 30 Sept 2026
threatmapper.org· checked 30 Sept 2026