Who should use tfsec?

tfsec is an open-source project built for devops engineers and cloud security teams.

Does tfsec have a free plan?

Yes — tfsec is open source under the MIT license and free to use.

What platforms does tfsec run on?

tfsec runs on the web, Android, Linux, Windows, and macOS.

Is tfsec still active?

Unverified. tfsec has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.

What are alternatives to tfsec?

Similar projects tracked by PulseGate include codegraph-brain, tzdoctor, and pyci-check.

tfsec is developed by egdels42.

Back to the index

tfsec

Name: tfsec
Author: egdels42

github.ioStatic analysis & linters

tfsec is an open-source static analysis tool that scans Terraform code for security vulnerabilities and misconfigurations. It provides detailed checks, supports custom policies, and integrates with CI pipelines, helping DevOps and security teams ensure infrastructure compliance and safety.

Open SourceMITWebAndroidLinuxWindowsmacOSCLI

Visit github.io

7.0kstars

555forks

6features

2019since

Overview

6 features

tfsec sits in PulseGate's Static analysis & linters category. It helps developers identify and fix security issues in Terraform infrastructure-as-code before deployment. It is built as an open-source project for devops engineers and cloud security teams. The project is open source (MIT). It ships for the web, Android, Linux, Windows, and macOS.

It is developed by egdels42, and it first shipped in 2019. Development happens publicly on GitHub with 7k stars. Among its 6 catalogued features are terraform scanning, static analysis, and security checks.

Terraform scanning
Static analysis
Security checks
Custom policies
CI integration
Open source

Built with & integrations

Connectors

github

Runs on

BrowserAndroidLinuxWindowsmacOSCLI

Trust & compliance

License

MIT

Verified signals

HTTPSOpen SourceFree tierGitHub · ★ 7.0kStore-verified publisher

Indexing history

What PulseGate has recorded for this listing

Indexed21 Aug · 11:11 UTC
Le Barbu - U Barbutu verified via Apple App Store Top Charts (RSS)
Source: Apple App Store Top Charts (RSS) · Open
Indexed13 Aug · 10:58 UTC
Bar Is Loaded 2 - Gym Math verified via Google Play Top Charts
Source: Google Play Top Charts · Open
Indexed27 Jul · 19:36 UTC
Bar Is Loaded 2 - Gym Math verified via Google Play Top Charts
Source: Google Play Top Charts · Open
Indexed19 Jul · 17:59 UTC
Bar Is Loaded 2 - Gym Math verified via Google Play Top Charts
Source: Google Play Top Charts · Open
Indexed17 Jul · 19:12 UTC
Escape : The Asylum verified via Apple App Store Top Charts (RSS)
Source: Apple App Store Top Charts (RSS) · Open
Indexed11 Jul · 17:48 UTC
Bar Is Loaded 2 - Gym Math verified via Google Play Top Charts
Source: Google Play Top Charts · Open
Indexed15 Jun · 18:47 UTC
Listing verified against its public source
Source: PulseGate · Open

Frequently asked questions about tfsec

What does tfsec do?: Tfsec helps developers identify and fix security issues in Terraform infrastructure-as-code before deployment. It is catalogued under Static analysis & linters on PulseGate.
Who should use tfsec?: tfsec is an open-source project built for devops engineers and cloud security teams.
Does tfsec have a free plan?: Yes — tfsec is open source under the MIT license and free to use.
What platforms does tfsec run on?: tfsec runs on the web, Android, Linux, Windows, and macOS.
Is tfsec still active?: Unverified. tfsec has not been re-checked since it entered the index, so there is no finding either way — and only a positive finding would say otherwise.
What are alternatives to tfsec?: Similar projects tracked by PulseGate include codegraph-brain, tzdoctor, and pyci-check.codegraph-brain tzdoctor pyci-check
Who develops tfsec?: tfsec is developed by egdels42.
How long has tfsec been around?: tfsec first shipped in 2019.

At a glance

Pricing: Open Source
Platforms: Mobile · Web
Languages: English
Open source: Yes · ★ 7.0k
License: MIT
Built for: devops engineers and cloud security teams
Model: Open source
Solves: Helps developers identify and fix security issues in Terraform infrastructure-as-code before deployment.

Registered as

GitHub: aquasecurity/tfsec
GitHub: cmeng-git/atalk-android
GitHub: erikh360/lumbar-jack
GitHub: karlicoss/orger
GitHub: leverbursche/meine-gleitzeit
GitHub: monsiu/Custom-RR

Developer

egdels42

Community-driven

GitHub

Open source

View on GitHub

Stars: 7,011
Forks: 555
Open issues: 16
Last commit: 25 Mar 2026
Commits 90d: 0
Contributors: 121
Authorship: Community-driven
Default branch: master
Latest release: v1.28.14 · 2 May 2025

Index record

Indexed: 15 Jun 2026
Lifecycle: Alive
Last seen: 21 Aug 2026

Identity audit (12)

Slug: sambalite-github-io
Lifecycle last checked: 8 Aug 2026
Verification state: Indexed for public listing
Listing state: Listed: yes
Index status: Included in index
Latest evidence snapshot: 15 Jun 2026
Timeline basis: Indexed-at chronology. This listing's first-seen date was written by the catalog backfill, not observed here, so it is not treated as a sighting.
Name from: Derived from the project's own page and URL.
Category from: Recorded source: taxonomy-pass-b.
Summary from: Taken from the project's own store listing.
Languages from: Detected by a language model, checked against the page's own declaration.
Canonical URL: https://aquasecurity.github.io/tfsec/v1.28.13

Ship this? Send a correction — no account, and you get a link to follow it.

Also in Static analysis & linters

Same category — not a similarity match