Government · head to head
Trimble Unity Maintain vs Trivy

Trimble Unity Maintain
Government
GIS-centric public asset and work management, the product formerly sold as Cityworks
- From
- On request
- Free plan
- No

Trivy
Cybersecurity
Open-source vulnerability and misconfiguration scanner
- From
- Free
- Free plan
- Yes
The short version
- Only Trivy has a free tier, so it costs nothing to try first.
- Each has a real cost: Trimble Unity Maintain esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.; Trivy reports what public advisory databases know, so coverage varies by ecosystem and unfixed CVEs create noise
- They diverge on capability: Trimble Unity Maintain covers Built on ArcGIS, Trivy covers Multi-target scanning.
- Prices and features above were last checked on 1 September 2026.
Where they differ
Only the attributes on which Trimble Unity Maintain and Trivy actually diverge.
| Attribute | Trimble Unity Maintain | Trivy |
|---|---|---|
| Starting price | On request | Free |
| Pricing model | quote | Open source, no licence fee |
| Free tier | No | Yes |
| Platforms | Web, iOS, Android, Windows | Linux, macOS, Windows, Docker, Kubernetes |
| Category | Government | Cybersecurity |
Identical on both: user rating (Not yet rated).
What each one covers
Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.
Only in Trimble Unity Maintain
- Built on ArcGIS
- Service requests
- Work order management
- Permits and licensing
- Mobile field access
- Storeroom and inventory
- Operational Insights
- AgileAssets convergence
Only in Trivy
- Multi-target scanning
- Vulnerability detection
- Misconfiguration checks
- Secret detection
What people use each for
The jobs each tool is most often brought in to do.
Trimble Unity Maintain
- A water utility wanting valve exercising and hydrant flushing recorded against the same GIS features the engineering team maintainsnot Trivy
- A city consolidating a citizen service request line, work orders and inspections into one location-based systemnot Trivy
- A state transportation department managing pavement and bridge assets with linear referencing rather than point assetsnot Trivy
- A public works department that has already licensed ArcGIS Enterprise and wants to avoid rekeying its asset inventorynot Trivy
Trivy
- Failing a pull request when a container image introduces a known CVEnot Trimble Unity Maintain
- Scanning Terraform and Kubernetes manifests for misconfiguration before applynot Trimble Unity Maintain
- Catching committed secrets as part of an existing CI stepnot Trimble Unity Maintain
Where each one falls short
Documented limitations, not opinions. Every one is a constraint you would hit in normal use.
Trimble Unity Maintain
- Esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
- The product is mid-rename from Cityworks to Trimble Unity Maintain with transition timelines Trimble has not committed to publicly, leaving contracts, documentation and integrator experience split between two names.
- CVE-2025-0994, a deserialisation flaw in Cityworks, was exploited in the wild and listed by CISA in February 2025, which makes on-premise deployments a patching obligation rather than a set-and-forget install.
- Because assets live in the GIS, changing the asset model is a GIS division change, so maintenance teams cannot restructure their own hierarchy without another department in the loop.
- It is built for North American public sector practice, and the permitting, funding source and reporting models do not map cleanly onto other countries or onto private industrial estates.
Trivy
- Reports what public advisory databases know, so coverage varies by ecosystem and unfixed CVEs create noise
- No built-in triage or exception workflow, so suppressing accepted risk is managed in config files
- Findings are point-in-time from CI, with no continuous runtime monitoring unless you add the commercial platform
Pricing, plan by plan
Trimble Unity Maintain
On request- Trimble Unity Maintain$undefined/year
- Annual subscription sized by population served, asset volume and user count
- Esri ArcGIS Enterprise or ArcGIS Online licensing required separately
- Hosted and on-premise deployment priced differently
Trivy
Free- TrivyFree
- Full scanner
- Unlimited scans
- Community support
Which should you pick?
Choose Trimble Unity Maintain if
- You need built on arcgis.
- You work on Web, iOS, Android, Windows.
- You also want service requests.
Choose Trivy if
- You need multi-target scanning.
- You want to start without paying.
- You work on Linux, macOS, Windows, Docker, Kubernetes.
- You also want vulnerability detection.
Questions people ask
- Is Trimble Unity Maintain or Trivy better?
- Neither clearly leads. Trimble Unity Maintain starts at On request and Trivy at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
- Which is cheaper, Trimble Unity Maintain or Trivy?
- Trivy has a free tier; the other does not. Paid plans start at On request for Trimble Unity Maintain and Free for Trivy.
- Does Trimble Unity Maintain or Trivy run on more platforms?
- Trimble Unity Maintain runs on Web, iOS, Android, Windows. Trivy runs on Linux, macOS, Windows, Docker, Kubernetes.
- Can I use Trivy for free?
- Yes. Trivy has a free tier, so you can try it without paying. Trimble Unity Maintain starts at On request.
- What is Trimble Unity Maintain best used for?
- Trimble Unity Maintain is most often used for a water utility wanting valve exercising and hydrant flushing recorded against the same gis features the engineering team maintains, a city consolidating a citizen service request line, work orders and inspections into one location-based system, a state transportation department managing pavement and bridge assets with linear referencing rather than point assets, a public works department that has already licensed arcgis enterprise and wants to avoid rekeying its asset inventory. Of those, a water utility wanting valve exercising and hydrant flushing recorded against the same gis features the engineering team maintains and a city consolidating a citizen service request line, work orders and inspections into one location-based system are not what Trivy is typically brought in for.
- What can Trimble Unity Maintain do that Trivy cannot?
- Trimble Unity Maintain covers Built on ArcGIS, Service requests, Work order management, Permits and licensing. Trivy covers Multi-target scanning, Vulnerability detection, Misconfiguration checks, Secret detection.
Answered from the vendors’ own pages
Trimble Unity Maintain: Is Cityworks discontinued?
Not discontinued, renamed. It is becoming Trimble Unity Maintain, converging with AgileAssets, and Trimble has not published a final transition date.
Trivy: Is Trivy free?
Yes, open source from Aqua Security with no licence fee. Aqua sells a commercial platform around it.
Trimble Unity Maintain: Do I need Esri ArcGIS?
Yes. The product is built on ArcGIS and cannot be deployed without an Esri licence.
Trivy: What can Trivy scan?
Container images, filesystems, Git repositories, Kubernetes clusters and infrastructure-as-code, for vulnerabilities, misconfigurations, secrets and licences.
Trimble Unity Maintain: Was there a security incident?
Yes. CVE-2025-0994 in Cityworks was exploited in the wild and added to the CISA known exploited vulnerabilities catalogue in February 2025.
Trivy: Does Trivy need a server?
No. It is a single binary, which is a large part of why it became a default in CI.
Trimble Unity Maintain: Can it handle roads and pavement as well as pipes?
Yes, through the AgileAssets lineage now inside the Unity Maintain family, which adds linear referencing for transportation assets.
Related pages
More on Trimble Unity Maintain
Other head to heads
- Trimble Unity Maintain vs CivicPlus Asset Management
- Trimble Unity Maintain vs VUEWorks
- Trimble Unity Maintain vs NEXGEN Asset Management
- Trimble Unity Maintain vs CentralSquare Asset Management
- Trimble Unity Maintain vs RecDesk
- Trimble Unity Maintain vs DataSF
- Trimble Unity Maintain vs CityView
- Trimble Unity Maintain vs Euna Solutions
- Trimble Unity Maintain vs Clariti
- Trimble Unity Maintain vs Springbrook Software
- Trimble Unity Maintain vs OpenGov
- Trimble Unity Maintain vs Bidnet Direct
- Trimble Unity Maintain vs ShotSpotter
- Trimble Unity Maintain vs Tyler Brazos
- Trimble Unity Maintain vs Vigilant Solutions
- Trimble Unity Maintain vs Workday Government
- Trimble Unity Maintain vs Zencity
- Trimble Unity Maintain vs Grype
- Trimble Unity Maintain vs Snyk
- Trimble Unity Maintain vs Chainguard
- Trimble Unity Maintain vs Semgrep
- Trimble Unity Maintain vs Bitwarden
- Trimble Unity Maintain vs Infisical
- Trimble Unity Maintain vs Authelia
- Trimble Unity Maintain vs Ory Kratos
- Trimble Unity Maintain vs HashiCorp Vault
- Trimble Unity Maintain vs Arnica
- Trimble Unity Maintain vs OWASP ZAP
- Trimble Unity Maintain vs Proton Mail
- Trimble Unity Maintain vs Veriff
- Trimble Unity Maintain vs Brave Browser
- Trimble Unity Maintain vs March Networks
- Trimble Unity Maintain vs Salient CompleteView
- Trimble Unity Maintain vs Sumsub
- Trimble Unity Maintain vs Syft
- Trivy vs CivicPlus Asset Management
- Trivy vs VUEWorks
- Trivy vs NEXGEN Asset Management
- Trivy vs CentralSquare Asset Management
- Trivy vs RecDesk
- Trivy vs DataSF
- Trivy vs CityView
- Trivy vs Euna Solutions
- Trivy vs Clariti
- Trivy vs Springbrook Software
- Trivy vs OpenGov
- Trivy vs Bidnet Direct
- Trivy vs ShotSpotter
- Trivy vs Tyler Brazos
- Trivy vs Vigilant Solutions
- Trivy vs Workday Government
- Trivy vs Zencity
- Trivy vs Grype
- Trivy vs Snyk
- Trivy vs Chainguard
- Trivy vs Semgrep
- Trivy vs Bitwarden
- Trivy vs Infisical
- Trivy vs Authelia
- Trivy vs Ory Kratos
- Trivy vs HashiCorp Vault
- Trivy vs Arnica
- Trivy vs OWASP ZAP
- Trivy vs Proton Mail
- Trivy vs Veriff
- Trivy vs Brave Browser
- Trivy vs March Networks
- Trivy vs Salient CompleteView
- Trivy vs Sumsub
- Trivy vs Syft
