About Clair
Clair is an open source project that provides a tool to monitor the security of containers through static analysis of vulnerabilities in appc and docker containers. Clair is an API-driven analysis engine that inspects containers layer-by-layer for known security flaws. It can be used to build services that provide continuous monitoring for container vulnerabilities. Vulnerability data is continuously imported from a known set of sources and correlated with the indexed contents of container images to produce lists of vulnerabilities that threaten a container. When vulnerability data changes upstream, the previous and new state of the vulnerability and the images they affect can be sent via webhook to a configured endpoint. All major components can be customized programmatically at compile-time without forking the project.
Used for
- Monitoring the security of containers through static analysis of vulnerabilities
- Inspecting containers layer-by-layer for known security flaws
- Building services that provide continuous monitoring for container vulnerabilities
- Updating vulnerability data from a set of sources you define and storing this data in its database
- Allowing clients to query this database for vulnerabilities within specific images through the use of an API
From Clair's own website, read 2026-10-23. How we build listings.
How to evaluate Cloud Security & CSPM
This is how the CIOPages Research Team evaluates this category. It is not an assessment of Clair. It comes from our Cloud Security Posture Management (CSPM) buyer guide.
Other Cloud Security & CSPM Vendors
View allCIOPages put this listing together from public sources. It’s information, not an endorsement. How we build listings. Work here? Claim this listing or .
Quick Facts
www.redhat.com/en/topics/containers/what-is-clairWe publish a detail only when we can point at the page it came from. Know when Clair was founded or where it is based? Send it to us, free.