Fluid Attacks’ scanners

Last updated: Mar 16, 2026

Fluid Attacks offers several Docker  images to perform security scans, which are described below.

These scanners can be seamlessly integrated into your development workflow, allowing you to perform security scans both locally and within your continuous integration and continuous delivery (CI/CD) pipeline.

SAST scanner

fluidattacks/sast refers to the tool to perform static application security testing (available as a Docker container ).

For more information about SAST, read “What is SAST? ”.

SCA scanner

fluidattacks/sca refers to the tool to perform software composition analysis (available as a Docker container ).

For more information about SCA, read “What is SCA? ”.

DAST scanner

fluidattacks/dast refers to the tool to perform dynamic application security testing (available as a Docker container ).

For more information about DAST, read “What is DAST? ”.

APK security scanner

fluidattacks/apk refers to the tool to perform APK security scans (available as a Docker container ). This scanner decompiles and searches vulnerabilities in APK files.