Grype

Command-line vulnerability scanner for container images and filesystems.

Desktopfreeglobal

Grype is an open-source command-line vulnerability scanner for container images, filesystems, and SBOMs, covering major OS and language package ecosystems with risk-based prioritization using EPSS and known-exploited-vulnerability data. It's aimed at developers and security teams who need to scan container images and filesystems in CI or locally.

Website

Full match profile

Behind the summary, Matchbox keeps a richer profile of Grype - the signals our matcher actually reads to decide when to surface it. It stays private; claim the listing to see and control it.

Problem & pain-point mapping
Who we surface it to (audience fit)
What it's a strong alternative to
Trust & credibility signals

Claim Grype to unlock →

Something wrong with this listing — dead link, not a real product, wrong info?

Try Matchbox with your own problem

Describe what is not working - we’ll show you whether Grype (or something else) actually fits.

Try a problem