Security Tools

🐳 Dockerfile / IaC linter

Before you deploy, measure it. Paste a Dockerfile, a docker-compose or a Kubernetes manifest and get an A–F grade with its security anti-patterns: runs as root, :latest, privileged, hostPath, plaintext secrets, no resource limits… All in your browser; nothing is sent. Detection rules? Use the detection linter.