No more typing reviews! Try our Samantha, our new voice AI agent.

Trivy vs Upwind comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Mar 29, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Trivy
Ranking in Container Security
4th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
12
Ranking in other categories
No ranking in other categories
Upwind
Ranking in Container Security
29th
Average Rating
9.6
Reviews Sentiment
8.7
Number of Reviews
2
Ranking in other categories
Vulnerability Management (32nd), Cloud Workload Protection Platforms (CWPP) (18th), API Security (12th), Cloud Security Posture Management (CSPM) (22nd), Cloud-Native Application Protection Platforms (CNAPP) (15th), Cloud Detection and Response (CDR) (8th), AI Security (61st)
 

Mindshare comparison

As of May 2026, in the Container Security category, the mindshare of Trivy is 3.4%, down from 5.2% compared to the previous year. The mindshare of Upwind is 2.2%, up from 1.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Container Security Mindshare Distribution
ProductMindshare (%)
Trivy3.4%
Upwind2.2%
Other94.4%
Container Security
 

Featured Reviews

Utsav Sharma - PeerSpot reviewer
Senior Security Consultant at Ernst & Young
Maintain operational efficiency by detecting misconfigurations and vulnerabilities
The vulnerability scanning feature is excellent as it supports various container capabilities like Docker and Sharma. It also offers repository scanning in the source code domain, allowing pre-push code scans. The misconfiguration detection works well for CloudFormation, Docker files, and Terraform. Its compliance support, like NIST, ensures that configurations align with standards. Trivy helps me significantly detect misconfigurations missed by the ops engineers or in Terraform by the naked eye. It ensures that my deployments are free of misconfigurations and vulnerabilities.
reviewer2702562 - PeerSpot reviewer
Manager, Information Security at a retailer with 1,001-5,000 employees
Increased compliance and visibility boost cloud security posture
Upwind has great runtime detection and response capabilities for our cloud workloads. It provides great context for vulnerability management, allowing us to see what our most important vulnerabilities are. Upwind gives us insight into API security threats and helps us identify misconfigurations in our cloud environments to align with security frameworks like CIS or NIST. With Upwind, we have greatly increased our cloud security posture. Our compliance rates have improved significantly, and they have helped us automate vulnerability management and gain insights into API endpoint security.
report
Use our free recommendation engine to learn which Container Security solutions are best for your needs.
894,738 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Manufacturing Company
12%
Computer Software Company
11%
Government
8%
Financial Services Firm
12%
Computer Software Company
10%
Healthcare Company
8%
Comms Service Provider
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise1
Large Enterprise9
No data available
 

Questions from the Community

What needs improvement with Trivy?
Trivy's marketing and awareness need improvement. Not everyone knows about it, which isn't ideal given its capabilities. There's potential to integrate AI and machine learning for enhanced function...
What is your primary use case for Trivy?
I use Trivy ( /products/trivy-reviews ) to scan code for vulnerabilities before deployment. Our projects, which are developed by different developers, involve various dependencies and third-party c...
What advice do you have for others considering Trivy?
I recommend Trivy to others due to its powerful and useful features. However, I suggest increasing its marketing to raise awareness. I rate Trivy an eight out of ten.
What is your experience regarding pricing and costs for Upwind?
The pricing, setup cost, and licensing process were pretty reasonable.
What needs improvement with Upwind?
Currently, we are working with Upwind on API security, which is something we want them to keep pushing. We also want them to be able to record SSH sessions; it's a tough request.
What is your primary use case for Upwind?
I have several use cases for Upwind. I will start with our private cloud that is based on Kubernetes, so we're using it also for Cloud Detection and Response and also for vulnerability scanning. We...
 

Comparisons

 

Also Known As

No data available
Upwind Security Upwind Platform for AWS Security Hub, Upwind Security Upwind for AWS Security Hub Extended
 

Overview

 

Sample Customers

Information Not Available
StockX, Yotpo, bill, Digital Turbine, nanit, CallRail, boomi
Find out what your peers are saying about Trivy vs. Upwind and other solutions. Updated: April 2026.
894,738 professionals have used our research since 2012.