Paste or upload your Dockerfile. Get instant security findings, optimization tips, and a letter grade. 17 static analysis rules — not an AI wrapper.
GPT-4o rewrites your Dockerfile fixing every issue found. Copy-paste ready.
Drop your Dockerfile in. Supports any valid Dockerfile syntax including multi-stage builds.
17 rules check for security issues, optimization gaps, and Docker best practices. No AI involved.
Free: detailed findings with fix instructions. $1.99: AI rewrites your entire Dockerfile with all fixes applied.
Catches root user, leaked secrets, unverified downloads, and missing healthchecks.
Pure static analysis — no cloud builds, no registry access needed. Results in under a second.
Detects bloated base images, cache-busting layer order, missing cleanup, and multi-stage opportunities.
Running as root user • Secrets in ENV/ARG instructions
Unpinned base images • Multiple CMD/ENTRYPOINT • Downloads without checksums
No HEALTHCHECK • ADD vs COPY • Bad layer ordering • Bloated base images
Missing EXPOSE • Shell form CMD • pip cache • No multi-stage builds
DockerAudit runs 17 static analysis rules against your Dockerfile covering security (root user, leaked secrets, unverified downloads), optimization (bloated images, bad layer caching, missing cleanup), and best practices (healthchecks, exec form CMD, pinned versions). No AI is involved in the scan — it's deterministic rule-based analysis.
No. Your Dockerfile is processed in memory and discarded immediately after the scan. We don't store, log, or share any uploaded content. The analysis happens server-side for accuracy but nothing persists.
Hadolint is excellent but requires installation and CLI usage. DockerAudit is a web-based alternative for quick one-off checks — perfect for code reviews, auditing vendor Dockerfiles, or checking files on machines where you can't install tools. The paid tier also generates an AI-fixed version of your Dockerfile.
The free scan gives you the full audit: all 17 rules, severity ratings, line numbers, descriptions, and fix instructions. The $1.99 upgrade uses GPT-4o to rewrite your entire Dockerfile with every issue fixed — ready to copy-paste into your project.
Yes. DockerAudit fully parses multi-stage builds with multiple FROM instructions, AS aliases, and cross-stage references. It also checks if a single-stage build could benefit from multi-stage architecture.
DockerAudit works with any valid Dockerfile regardless of the application ecosystem — Python, Node.js, Go, Rust, Java, Ruby, PHP, and more. Rules are Dockerfile-specific, not language-specific.