Docker Scout

Freemium

infoAbout Docker Scout

Docker Scout is a security tool that analyzes container images to identify vulnerabilities, outdated packages, and compliance issues for development teams using Docker. The tool generates a software bill of materials (SBOM) for each image—a complete inventory of every component inside. It cross-references this SBOM against continuously streaming CVE data to surface known vulnerabilities and recommend remediation steps as new threats emerge, without requiring re-scans. When a base image has security issues, Scout checks for updated or patched versions and recommends replacement. For vulnerabilities in other layers, it pinpoints exactly where the issue was introduced and provides layer-specific fix recommendations. Docker Scout integrates with Docker Desktop, Docker Hub, the Docker CLI, and the Docker Scout Dashboard, embedding security checks directly into development workflows. It offers policy evaluation tools to assess images against organization-defined security standards. Scout requires a Docker Hub organization admin to enable the service. Paid plans are available starting at $9 per user per month.