ThreatMapper
Open Source Cloud Native Application Protection Platform (CNAPP) observed · 2026-10-12
Health v2 · maintenance only
78/100
- Activity 77
- Release rhythm 66
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.
- gap_med: 21.5
- age_days: 2448
- days_rel: 227
- days_push: 141
- n_releases_24m: 9
Adoption not part of the score
5324 stars · 631 forks observed · 2026-10-12
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
Deepfence ThreatMapper is an open-source Cloud Native Application Protection Platform (CNAPP) that hunts threats in production cloud, Kubernetes, serverless, and on-prem environments, ranking them by risk-of-exploit. It bundles SecretScanner for exposed secrets and YaraHunter for malware indicators, generating runtime SBOMs and compliance checks.
Use cases
- scan kubernetes clusters for vulnerabilities and misconfigurations
- find exposed secrets and api keys in container images
- detect malware in running docker containers
- generate runtime SBOMs from production workloads
- check cloud infrastructure against CIS and PCI-DSS compliance benchmarks
- prioritize vulnerabilities by risk of exploit
- visualize attack paths in cloud native applications
When to choose
- you need runtime security observability for containers, Kubernetes, or serverless workloads
- you want a self-hosted, fully open-source CNAPP with no feature limits
- you need combined vulnerability, secret, malware, and compliance scanning in one console
- you want to rank threats by exploitability rather than raw CVSS scores
When to avoid
- you only need lightweight CI-time image scanning without a management console
- you require a managed SaaS security product with vendor support
- your workloads are not containerized or cloud-based
- you need deep host-based endpoint detection beyond container and cloud scanning
Facets
application · maturity active
security vulnerability-scanning monitoring secrets-management container-runtime container-orchestration security cloud-computing cloud self-hosted cnapp cwpp cspm devsecops threat-detection sbom attack-path-analysis runtime-security yara malware-scanning compliance containers devops kubernetes docker linux
8 sources
- readme: https://github.com/deepfence/ThreatMapper · fetched 2026-10-12 · 37e7356c6b96
- homepage: https://threatmapper.org · fetched 2026-08-29 · c03093397d26
- site_page: https://threatmapper.org/threatmapper/docs · fetched 2026-08-29 · c9153e69e36c
- site_page: https://threatmapper.org/docs/secretscanner · fetched 2026-08-29 · 2d1dea76647c
- site_page: https://threatmapper.org/docs/yarahunter · fetched 2026-08-29 · 5053c820e5ab
- site_page: https://threatmapper.org/docs/packetstreamer · fetched 2026-08-29 · 27d7b76db6b6
- site_page: https://threatmapper.org/docs/ebpfguard · fetched 2026-08-29 · 5fd56bd39a4f
- site_page: https://threatmapper.org/docs/flowmeter · fetched 2026-08-29 · aea13916f256
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| deepfence/ThreatMapper | main | 78 |
| deepfence/SecretScanner | plugin | 67 |
| deepfence/YaraHunter | plugin | 67 |
| deepfence/community | docs | 32 |
For agents
markdown · JSON · MCP: product_card(name="deepfence/ThreatMapper")
Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem