What Checkov is
Checkov is the leader in IaC scanning as an open source solution. The vendor site is bridgecrew.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Checkov covers
Checkov is in the catalog for these capabilities. Categories: IaC. Catalog tags: Hands-on, Nerdy, Open Source, and Acquired.
How to evaluate Checkov in a security program
Use Checkov as a stack candidate, not as diligence evidence. The oneNorma score for Checkov is 5.3/10 (percentile 57). If the real gap is in IaC, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what bridgecrew.io publishes. Contrast it with pentesting and Security Cloud & Compliance.