Dev tools · alternatives · 2026

24 alternatives to Phonito Security

Docker Vulnerability Management For Developers

Below are 24 products that do a similar job, ranked by how close each is in meaning and then by launch-day votes. Phonito Security launched in 2019; newer entries below may have overtaken it.

1. 1IB
   I built ContainerCVE – a web tool to scan public Docker images▲91

   I found it odd there wasn’t a simple web tool to scan Docker Hub images for vulnerabilities. So I built one. It’s powered by the popular open-source tool Trivy.

   2023 · containercve.com · its alternatives →

2. 2
   Dockhand▲133

   Docker management for everyone

   Aug 2026 · dockhand.pro · its alternatives →

3. 3
   AppCanary – Keep vulnerable software off your servers▲108

   aToday, we’re excited to announce that we’re going to be able to build tools that impact almost every software developer on the planet — we’re joining GitHub.

   2015 · appcanary.com · its alternatives →

4. 4
   Artifact Keeper – Open-Source Artifactory/Nexus Alternative in Rust▲166

   I'm a software engineer who keeps getting pulled into DevOps no matter how hard I try to escape it. I recently moved into a Lead DevOps Engineer role writing tooling to automate a lot of the pain away. On my own time outside of work, I built Artifact Keeper — a self-hosted artifact registry that supports 45+ package formats. Security scanning, SSO, replication, WASM plugins — it's all in the MIT-licensed release. No enterprise tier. No feature gates. No surprise invoices. Your package managers — pip, npm, docker, cargo, helm, go, all of them — talk directly to it using their native…

   Feb 2026 · github.com · its alternatives →

5. 5
   The Secure Developer - Ep. #7, Understanding Container Security▲60

   Security for developers, including tools and best practices.

   2017 · heavybit.com · its alternatives →

6. 6
   tunnelto.dev▲186

   Expose localhost to the internet with a public URL

   2020 · tunnelto.dev · its alternatives →

7. 7
   Open Source Security Management by FOSSA▲66

   Automate app security with OSS vulnerability management

   2020 · fossa.com · its alternatives →

8. 8PR
   Patchwork – Real-time notifications for OSS vulnerabilities▲122

   2016 · patchworksecurity.com · its alternatives →

9. 9
   Awesome OSS Developer Security Tools▲100

   A curated list of free OSS developer-first security tools

   2022 · its alternatives →

10. 10
    Portainer – A lightweight management UI for Docker▲146

    Portainer is one platform to deploy, run, secure, and govern Kubernetes across your whole fleet, from a single control plane. A platform is a product, not a project.

    2016 · portainer.io · its alternatives →

11. 11
    Keystone▲125

    We kept hitting the same wall: you clone some arbitrary repo and just want it to run without any configuration work. So we built Keystone, an open source tool that spins up a Modal sandbox, runs Claude Code inside it, and produces a working .devcontainer/ config (Dockerfile, devcontainer.json, test runner) for any git repo. We build on the dev container standard, so the output works with VS Code and GitHub Codespaces out of the box. Main use cases: reproducible dev/CI environments, self-describing repos, and safely sandboxed coding agents. Our goal is to encourage all repos to…

    Mar 2026 · github.com · its alternatives →

12. 12
    Habitus▲126

    An open source build flow tool for Docker

    2016 · habitus.io · its alternatives →

13. 13
    Dockter▲70

    A low-overhead, open-source Docker log management tool

    2020 · its alternatives →

14. 14
    DevLab – Docker Containerization for Local Development▲34

    :whale: Containerize your development workflow. Contribute to binci/binci development by creating an account on GitHub.

    2015 · github.com · its alternatives →

15. 15
    Tips to stay safe from NPM supply chain attacks▲96

    Hi everyone, given the recent increase of attacks on the NPM supply chain, I've put together a list of tips and tricks to help developers stay secure on this specific topic: https://github.com/bodadotsh/npm-security-best-practices I'd love for you to check it out, and contribute your own insights and best practices to make this a comprehensive resource for the community. Cheers!

    2025 · github.com · its alternatives →

16. 16
    1Password Developer Tools▲105

    Develop faster, eliminate complexity, protect your secrets

    2022 · 1password.com · its alternatives →

17. 17
    Docker-phobia: Analyze Docker image size with a treemap▲91

    Analyze Docker images size. Contribute to remorses/docker-phobia development by creating an account on GitHub.

    2024 · github.com · its alternatives →

18. 18
    The Secure Developer - Ep. #1 Prioritizing Secure Development▲66

    Security for developers, covering tools and best practices.

    2016 · heavybit.com · its alternatives →

19. 19
    Vulnerability Management▲7

    First Globally Vulnerability Management Platform on earth

    2019 · its alternatives →

20. 20
    Tunnelto.dev – expose localhost with a public URL (built in Rust)▲100

    Expose your local web server to the internet with a public URL

    2020 · tunnelto.dev · its alternatives →

21. 21
    npm install actual-malware▲55

    Our package registry ecosystem has a serious problem... and not just npm. People are aware of this but maybe this will make them a bit more aware

    2022 · github.com · its alternatives →

22. 22
    Application Security portal▲36

    Vulnerability management, vulnerability discovery, devsecops

    2023 · whitespots.io · its alternatives →

23. 23
    Phynd▲9

    Affordable, automated vulnerability scanning—no blind spots

    2025 · phynd.io · its alternatives →

24. 24
    ShipSecure▲7

    Secure what you build from day 1

    2025 · shipsecure.kit.com · its alternatives →

Ranked by how close each launch is in meaning, then by votes. Prices were read from each product’s own site when checked and can change. Refine with your own description →