Softwr

Government · head to head

Trimble Unity Maintain vs Trivy

Trimble Unity Maintain logo

Trimble Unity Maintain

Government

GIS-centric public asset and work management, the product formerly sold as Cityworks

From
On request
Free plan
No
Trivy logo

Trivy

Cybersecurity

Open-source vulnerability and misconfiguration scanner

From
Free
Free plan
Yes

The short version

  • Only Trivy has a free tier, so it costs nothing to try first.
  • Each has a real cost: Trimble Unity Maintain esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.; Trivy reports what public advisory databases know, so coverage varies by ecosystem and unfixed CVEs create noise
  • They diverge on capability: Trimble Unity Maintain covers Built on ArcGIS, Trivy covers Multi-target scanning.
  • Prices and features above were last checked on 1 September 2026.

Where they differ

Only the attributes on which Trimble Unity Maintain and Trivy actually diverge.

Attributes where Trimble Unity Maintain and Trivy differ
AttributeTrimble Unity MaintainTrivy
Starting priceOn requestFree
Pricing modelquoteOpen source, no licence fee
Free tierNoYes
PlatformsWeb, iOS, Android, WindowsLinux, macOS, Windows, Docker, Kubernetes
CategoryGovernmentCybersecurity

Identical on both: user rating (Not yet rated).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Trimble Unity Maintain

  • Built on ArcGIS
  • Service requests
  • Work order management
  • Permits and licensing
  • Mobile field access
  • Storeroom and inventory
  • Operational Insights
  • AgileAssets convergence

Only in Trivy

  • Multi-target scanning
  • Vulnerability detection
  • Misconfiguration checks
  • Secret detection

What people use each for

The jobs each tool is most often brought in to do.

Trimble Unity Maintain

  • A water utility wanting valve exercising and hydrant flushing recorded against the same GIS features the engineering team maintainsnot Trivy
  • A city consolidating a citizen service request line, work orders and inspections into one location-based systemnot Trivy
  • A state transportation department managing pavement and bridge assets with linear referencing rather than point assetsnot Trivy
  • A public works department that has already licensed ArcGIS Enterprise and wants to avoid rekeying its asset inventorynot Trivy

Trivy

  • Failing a pull request when a container image introduces a known CVEnot Trimble Unity Maintain
  • Scanning Terraform and Kubernetes manifests for misconfiguration before applynot Trimble Unity Maintain
  • Catching committed secrets as part of an existing CI stepnot Trimble Unity Maintain

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Trimble Unity Maintain

  • Esri ArcGIS is a hard prerequisite, so an organisation without it faces a second substantial licence and a GIS programme before the maintenance system can be used at all.
  • The product is mid-rename from Cityworks to Trimble Unity Maintain with transition timelines Trimble has not committed to publicly, leaving contracts, documentation and integrator experience split between two names.
  • CVE-2025-0994, a deserialisation flaw in Cityworks, was exploited in the wild and listed by CISA in February 2025, which makes on-premise deployments a patching obligation rather than a set-and-forget install.
  • Because assets live in the GIS, changing the asset model is a GIS division change, so maintenance teams cannot restructure their own hierarchy without another department in the loop.
  • It is built for North American public sector practice, and the permitting, funding source and reporting models do not map cleanly onto other countries or onto private industrial estates.

Trivy

  • Reports what public advisory databases know, so coverage varies by ecosystem and unfixed CVEs create noise
  • No built-in triage or exception workflow, so suppressing accepted risk is managed in config files
  • Findings are point-in-time from CI, with no continuous runtime monitoring unless you add the commercial platform

Pricing, plan by plan

Trimble Unity Maintain

On request
  • Trimble Unity Maintain$undefined/year
    • Annual subscription sized by population served, asset volume and user count
    • Esri ArcGIS Enterprise or ArcGIS Online licensing required separately
    • Hosted and on-premise deployment priced differently

Trivy

Free
  • TrivyFree
    • Full scanner
    • Unlimited scans
    • Community support

Which should you pick?

Choose Trimble Unity Maintain if

  • You need built on arcgis.
  • You work on Web, iOS, Android, Windows.
  • You also want service requests.

Choose Trivy if

  • You need multi-target scanning.
  • You want to start without paying.
  • You work on Linux, macOS, Windows, Docker, Kubernetes.
  • You also want vulnerability detection.

Questions people ask

Is Trimble Unity Maintain or Trivy better?
Neither clearly leads. Trimble Unity Maintain starts at On request and Trivy at Free, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Trimble Unity Maintain or Trivy?
Trivy has a free tier; the other does not. Paid plans start at On request for Trimble Unity Maintain and Free for Trivy.
Does Trimble Unity Maintain or Trivy run on more platforms?
Trimble Unity Maintain runs on Web, iOS, Android, Windows. Trivy runs on Linux, macOS, Windows, Docker, Kubernetes.
Can I use Trivy for free?
Yes. Trivy has a free tier, so you can try it without paying. Trimble Unity Maintain starts at On request.
What is Trimble Unity Maintain best used for?
Trimble Unity Maintain is most often used for a water utility wanting valve exercising and hydrant flushing recorded against the same gis features the engineering team maintains, a city consolidating a citizen service request line, work orders and inspections into one location-based system, a state transportation department managing pavement and bridge assets with linear referencing rather than point assets, a public works department that has already licensed arcgis enterprise and wants to avoid rekeying its asset inventory. Of those, a water utility wanting valve exercising and hydrant flushing recorded against the same gis features the engineering team maintains and a city consolidating a citizen service request line, work orders and inspections into one location-based system are not what Trivy is typically brought in for.
What can Trimble Unity Maintain do that Trivy cannot?
Trimble Unity Maintain covers Built on ArcGIS, Service requests, Work order management, Permits and licensing. Trivy covers Multi-target scanning, Vulnerability detection, Misconfiguration checks, Secret detection.

Answered from the vendors’ own pages

Trimble Unity Maintain: Is Cityworks discontinued?

Not discontinued, renamed. It is becoming Trimble Unity Maintain, converging with AgileAssets, and Trimble has not published a final transition date.

Trivy: Is Trivy free?

Yes, open source from Aqua Security with no licence fee. Aqua sells a commercial platform around it.

Trimble Unity Maintain: Do I need Esri ArcGIS?

Yes. The product is built on ArcGIS and cannot be deployed without an Esri licence.

Trivy: What can Trivy scan?

Container images, filesystems, Git repositories, Kubernetes clusters and infrastructure-as-code, for vulnerabilities, misconfigurations, secrets and licences.

Trimble Unity Maintain: Was there a security incident?

Yes. CVE-2025-0994 in Cityworks was exploited in the wild and added to the CISA known exploited vulnerabilities catalogue in February 2025.

Trivy: Does Trivy need a server?

No. It is a single binary, which is a large part of why it became a default in CI.

Trimble Unity Maintain: Can it handle roads and pavement as well as pipes?

Yes, through the AgileAssets lineage now inside the Unity Maintain family, which adds linear referencing for transportation assets.

Share

Related pages

Other head to heads