Dockerfile Editor & Linter
Paste your Dockerfile or pick a template — security scoring and best practice checks run instantly. No data ever leaves your browser.
Dockerfile Security Scanner
80% of container security starts at the Dockerfile. This tool surfaces the most common vulnerabilities — running as root, untagged base images, missing WORKDIR — in a single glance. Critical for Kubernetes pod hardening.
Multi-stage Build & Distroless
Multi-stage builds strip build tools from the final image, dramatically shrinking the attack surface. The Node.js template uses gcr.io/distroless; the Go template uses a scratch-based minimal image — both production-ready.
Best Practices Checklist
The scoring engine validates CIS Docker Benchmark rules client-side: latest tag usage, USER directive, WORKDIR, ADD vs COPY, and apt-get cache cleanup — without sending your Dockerfile anywhere.