Terrascan is archived. Here's where to land.
Terrascan helped establish policy-as-code for infrastructure, with policies written in Rego, the policy language of Open Policy Agent. Its repository is now archived and read-only, so it takes no further changes. You have to migrate anyway, so the useful question is which of Terrascan's jobs you relied on, and where each one goes.
Terrascan and audytx at a glance
| Dimension | audytx | Terrascan |
|---|---|---|
| Maintenance | actively developed; live engine version on /status | repository archived on 2025-11-20 |
| Policies | built-in AWS checks with cross-resource reasoning | written in Rego, per its README |
| Scope | AWS only: Terraform and CloudFormation | Terraform, CloudFormation, Azure Resource Manager, Kubernetes, Helm, Kustomize and Dockerfiles, per its README |
| Delivery | GitHub App and hosted MCP server | command line |
Terrascan facts are from its repository, checked 2026-10-01. audytx's own measured results are on the benchmark page.
Which job moves where
Start from what Terrascan actually did for you. There were usually three jobs.
| # | What Terrascan did for you | Where it goes |
|---|---|---|
| 1 | Scanned our Terraform in CI or on pull requests | audytx, for AWS: it reviews each pull request as a GitHub App, with context deciding which findings are real and each set-aside finding listed with its reason |
| 2 | Ran our custom Rego policies | a maintained policy engine such as Open Policy Agent; audytx's checks are built in and are not written as Rego |
| 3 | Scanned Kubernetes manifests and other clouds | a breadth tool such as Checkov or Trivy; audytx covers AWS only and can run beside them |
Migrating a mixed estate
Estates leaving Terrascan often hold CloudFormation next to Terraform. audytx scans both: see the CloudFormation benchmark and audytx vs cfn-nag.
Frequently asked questions
Is Terrascan still maintained?
No. Its repository was archived on November 20, 2025 and is read-only. The latest release is v1.19.9.
What should I replace Terrascan with?
Start from the job Terrascan was doing for you. For AWS Terraform and CloudFormation review on pull requests, audytx. For custom Rego policies, a maintained policy engine such as Open Policy Agent. For multi-format or multi-cloud breadth, a tool such as Checkov or Trivy, which can run beside audytx.
Replace Terrascan on your next pull request
Install the GitHub App and audytx reviews your next pull request, with no CI rewrite needed. The Free plan includes 100 scans a month.