Trivy Pricing
Plans and cost breakdown for 2026
Open Source
Free and open source (Apache 2.0)
by Aqua Security · Security
Is Trivy Worth It?
What You Get
- + One tool for CVEs IaC secrets and licences
- + SBOM output in CycloneDX and SPDX
- + Single binary with no infrastructure to run
- + Apache 2.0 with no usage limits
- + Default choice in most CI examples
What to Watch Out For
- - No runtime visibility at all
- - Produces high CVE volume without exploitability context
- - Database downloads can slow cold CI runs
- - Noise requires tuning to be actionable
Security Pricing Comparison
| Tool | Pricing Model | Starting Price | Vendor |
|---|---|---|---|
| Trivy (this tool) | Open Source | Free and open source (Apache 2.0) | Aqua Security |
| Aikido Security | Freemium | Free tier (2 users, 10 repos); Basic $300/month (10 users, 100 repos); Pro $600/month | Aikido Security |
| Allstar by OpenSSF | Free | Free and open source | Open Source Security Foundation (OpenSSF) |
| Apiiro | Paid | Contact for pricing | Apiiro |
| Aqua Security AI | Paid | Custom pricing | Aqua Security |
| Arnica | Freemium | Free tier available; paid plans from $300/year (Core Business), Core Enterprise from $600/year | Arnica |
| Bearer | Freemium | Free tier available | Bearer Inc. |
| Bytebase | Freemium | Free (self-hosted Community, up to 20 users); Pro from $20/user/month (cloud-only); self-hosted paid features require Enterprise | Bytebase |
| Chainguard | Freemium | Up to 5 free images per organisation; Catalog starts at $19,000 for a team of 10 | Chainguard Inc. |
| Checkmarx | Enterprise | Custom pricing (typically ~$8K–$50K+/year depending on developers, modules, and term) | Checkmarx |
| Checkov | Open Source | Free and open source (Apache 2.0) | Prisma Cloud (Palo Alto Networks) |
Pricing FAQ
How much does Trivy cost?
Trivy uses a open source pricing model. Plans start at Free and open source (Apache 2.0).
Does Trivy have a free plan?
Yes, Trivy is completely free to use.
Is Trivy worth the price?
Trivy offers one tool for cves iac secrets and licences and sbom output in cyclonedx and spdx. However, consider that no runtime visibility at all. Compare with alternatives to find the best value for your needs.
What are cheaper alternatives to Trivy?
Check our alternatives page for Trivy to find more affordable options in the Security category.
Not sure about Trivy?
Explore alternatives or compare with other tools.