← All tools

KICS

IaC Security · Intermediate

Open-source IaC scanner by Checkmarx.

Knowledge reference only. Prefer in-browser Labs first. Use this tool only on systems you own or have written authorization to test.

What to learn

  • Multi-IaC
  • SARIF output

Legitimate use

Complement other IaC scanners.

Official docs →

Example commands (lab VMs only)

  • kics scan -p ./terraform
    Scan templates