Compare software

Grype vs Clair: catalog facts
Grype	Clair
Free The open-source software is available without a license fee. Hosting, hardware and…	Free Free and open source.
Windows, macOS, Linux, Command line	Self-hosted
Can scan package inventories and software bills of materials.	Static analysis of image layers without running containers Separate indexer, matcher and notifier components
Results depend on package identification and vulnerability database coverage.	Runs as a service, so it needs setup rather than a single command Aimed at registries and pipelines more than individual desktop use
Downloadable app	Self-hosted
Open source	Open source
License: Apache-2.0	License: Apache-2.0
Not stated if an account is needed	No account needed
Not stated if it works offline	Not stated if it works offline
Official website Full listing and sources Checked September 22, 2026	Official website Full listing and sources Checked September 24, 2026

Catalog facts only. Anything “not stated” is unconfirmed. Check full listings for details.