- Versioned documentation in https://docs.kics.io/
- Fix KICS not rendering Helm chart bug #2761 (#2762)
- Fix malformed files not reporting error #1930 (#2754)
© 2021 Checkmarx Ltd. All Rights Reserved.
KICS stands for Keeping Infrastructure as Code Secure, it is open source and is a must-have for any cloud-native project.
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
What makes KICS really powerful and popular is its built-in extensibility. This extensibility is achieved by:
KICS is 100% open source is written in Golang using Open Policy Agent (OPA).
Golang speed, simplicity, and reliability made it the perfect choice for writing KICS, while Rego as a query language, was a native choice to implement security queries.
So far have written 1000+ ready-to-use queries that cover a wide range of vulnerabilities checks for AWS, GCP, Azure and other cloud providers.
KICS has a pluggable architecture with an extensible pipeline of parsing IaC languages, which allows easy integration of new IaC languages and queries.
At a high very level, KICS is composed of the following main components: a command-line interface, parser, queries execution engine, IaC providers, security queries, and results writer.
The sequence diagram below depicts the interaction of the main KICS components: