Deepfence ThreatMapper
Open source cloud-native application protection platform
Founded
2017
Starting Price
Free
Category
Cybersecurity
Last updated March 5, 2026
About Deepfence ThreatMapper
Deepfence ThreatMapper is an open-source CNAPP that scans production environments for vulnerabilities, exposed secrets, malware, and compliance misconfigurations across cloud, Kubernetes, containers, and VMs. It uses a ThreatGraph engine to prioritize threats by real-world exploitability rather than raw severity scores, helping security teams focus remediation where it matters most.
Pros & Cons
Pros
- Fully free and open source under Apache 2.0 with no feature gating
- Combines vulnerability, secret, malware, and compliance scanning in one platform
- ThreatGraph prioritizes by exploitability, not just severity scores
- Supports AWS, GCP, Azure, Kubernetes, Docker, and bare metal
- Scales to 100,000+ nodes from a single management console
Key Features
ThreatGraph Prioritization
Correlates and ranks security alerts across risk categories by exploitability rather than just CVSS scores, reducing alert fatigue
Topological Attack Surface Mapping
Builds real-time visual topology maps of cloud instances, Kubernetes nodes, containers, and serverless resources
Vulnerability Scanning
Scans running workloads, container images, and CI/CD pipelines for known CVEs against multiple vulnerability databases
Secret Scanning
Detects over 140 types of exposed secrets including API keys, tokens, passwords, and certificates in filesystems and images
Runtime SBOM Generation
Generates Software Bill of Materials from live production workloads for continuous dependency tracking
Malware Detection
Scans for known malware signatures and indicators of compromise in running containers and hosts
Compliance Benchmarking
Monitors compliance against CIS, PCI-DSS, HIPAA, GDPR, NIST, and SOC 2 benchmarks
Pricing
ThreatMapper (Open Source)
Free
- Full vulnerability/secret/malware scanning
- ThreatGraph prioritization
- Compliance benchmarks
- Topological mapping
- Runtime SBOMs
Best For
Cloud Security Posture Management
Continuously scan Kubernetes containers and hosts to identify exploitable vulnerabilities across your attack surface
Shift-Left CI/CD Security
Integrate scanning into GitHub Actions or Jenkins pipelines to catch CVEs and secrets before production
Multi-Cloud Compliance Auditing
Run automated CIS, PCI-DSS, and HIPAA compliance benchmarks across AWS, GCP, and Azure
Open-Source CNAPP Alternative
Get meaningful cloud security visibility without the cost of enterprise solutions like Wiz or Prisma Cloud
Similar Tools
Ready to try Deepfence ThreatMapper?
Start using Deepfence ThreatMapper today and boost your productivity.
Visit Website
