Softwr

Cybersecurity · head to head

Grype vs Norton 360

Grype logo

Grype

Cybersecurity

Vulnerability scanner for container images and filesystems

From
Free
Rated
-
Full reviewWebsite
Norton 360 logo

Norton 360

Cybersecurity

Powerful protection against evolving threats

From
$36/year
Rated
-
Full reviewWebsite

The short version

  • Only Grype has a free tier, so it costs nothing to try first.
  • Each has a real cost: Grype depends on public vulnerability databases, so coverage and false positives vary by ecosystem; Norton 360 device limit of 3 devices on Standard plan; higher tiers needed for family with multiple devices
  • They diverge on capability: Grype covers Image and filesystem scanning, Norton 360 covers Real-time threat protection.

Where they differ

Only the attributes on which Grype and Norton 360 actually diverge.

Attributes where Grype and Norton 360 differ
AttributeGrypeNorton 360
Starting priceFree$36/year
Pricing modelOpen source, no licence feeUnknown
Free tierYesNo
PlatformsLinux, macOS, Windows, DockerWindows, macOS, Android, iOS
FoundedUnknown1982

Identical on both: user rating (Not yet rated), category (Cybersecurity).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Grype

  • Image and filesystem scanning
  • SBOM-driven
  • Wide ecosystem coverage
  • Pipeline friendly

Only in Norton 360

  • Real-time threat protection
  • Ransomware protection
  • Firewall
  • Password Manager
  • Secure VPN
  • Cloud backup
  • Dark Web Monitoring
  • Parental Controls

What people use each for

The jobs each tool is most often brought in to do.

Grype

  • Re-scanning stored SBOMs as new CVEs are published, without rebuilding imagesnot Norton 360
  • Failing CI when a build introduces a known vulnerabilitynot Norton 360
  • Auditing what is actually installed inside a third-party imagenot Norton 360

Norton 360

  • Antivirusnot Grype
  • Internet Securitynot Grype
  • Identity Protectionnot Grype

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Grype

  • Depends on public vulnerability databases, so coverage and false positives vary by ecosystem
  • No triage, exception tracking or reporting UI — that is Anchore’s commercial product
  • Overlaps heavily with Trivy, and most teams pick one rather than running both

Norton 360

  • Device limit of 3 devices on Standard plan; higher tiers needed for family with multiple devices
  • Parental controls unavailable on Standard plan, requiring purchase of separate Norton Family app
  • No HIPAA compliance or BAA support for regulated industries
  • Exploit Prevention works only on Windows devices, not available for macOS
  • Limited account recovery options if master password is forgotten

Pricing, plan by plan

Grype

Free
  • GrypeFree
    • Full functionality
    • No usage limits
    • Community support

Norton 360

$36/year
  • Norton 360 Standard$36/year
    • Antivirus and malware protection
    • VPN
    • Dark web monitoring
  • Norton 360 Deluxe$49.99/year
    • All Standard features
    • 50 GB cloud backup
    • Parental controls
  • Norton 360 Premium$54.99/year
    • All Deluxe features
    • 250 GB cloud backup
    • LifeLock identity theft protection

Which should you pick?

Choose Grype if

  • You need image and filesystem scanning.
  • You want to start without paying.
  • You work on Linux, macOS, Windows, Docker.
  • You also want sbom-driven.
Grype review

Choose Norton 360 if

  • You need real-time threat protection.
  • You work on Windows, macOS, Android, iOS.
  • You also want ransomware protection.
Norton 360 review

Questions people ask

Is Grype or Norton 360 better?
Neither clearly leads. Grype starts at Free and Norton 360 at $36/year, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Grype or Norton 360?
Grype has a free tier; the other does not. Paid plans start at Free for Grype and $36/year for Norton 360.
Does Grype or Norton 360 run on more platforms?
Grype runs on Linux, macOS, Windows, Docker. Norton 360 runs on Windows, macOS, Android, iOS.
Can I use Grype for free?
Yes. Grype has a free tier, so you can try it without paying. Norton 360 starts at $36/year.
What is Grype best used for?
Grype is most often used for re-scanning stored sboms as new cves are published, without rebuilding images, failing ci when a build introduces a known vulnerability, auditing what is actually installed inside a third-party image. Of those, re-scanning stored sboms as new cves are published, without rebuilding images and failing ci when a build introduces a known vulnerability are not what Norton 360 is typically brought in for.
What can Grype do that Norton 360 cannot?
Grype covers Image and filesystem scanning, SBOM-driven, Wide ecosystem coverage, Pipeline friendly. Norton 360 covers Real-time threat protection, Ransomware protection, Firewall, Password Manager.

Answered from the vendors’ own pages

Grype: Is Grype free?

Yes, open source from Anchore. Anchore Enterprise is the paid platform around it.

Norton 360: What operating systems does Norton 360 Standard support?

Windows 7 SP1 through Windows 11, macOS 10.13 and later, Android 10.0 or later, and current plus two previous iOS versions. Not all features are available on all platforms.

Source
Grype: What is the difference between Grype and Syft?

Syft generates the software bill of materials; Grype matches that inventory against vulnerability data. They are designed to be used together.

Norton 360: How much cloud backup storage is included in Norton 360 Standard?

2 GB of cloud backup storage is included with Norton 360 Standard. Higher tiers offer 50 GB (Deluxe) and 250 GB (Premium).

Source
Grype: Grype or Trivy?

They cover similar ground. Trivy is broader out of the box, including misconfiguration and secret scanning; Grype pairs more cleanly with an SBOM-first workflow.

Norton 360: Does Norton 360 include a VPN?

Yes. All Norton 360 plans include a VPN for secure browsing. The VPN is available on Windows, Mac, iOS, and Android devices.

Source
Norton 360: Is Norton 360 HIPAA compliant?

No. Norton 360 does not offer HIPAA compliance or Business Associate Agreements (BAA), making it unsuitable for healthcare organizations handling protected health information (PHI).

Source
Norton 360: What is the renewal price after the first year?

First year pricing is discounted. Standard renews at 94.99 USD per year, Deluxe at 119.99 USD per year. This represents a 140% increase over Deluxe's first-year rate of 49.99 USD.

Source
Share

Related pages

More on Grype

More on Norton 360

Keep looking

Other head to heads