Back to all tools
Aqua Security
End-to-end cloud-native security from code to cloud.
Licensed
Security Container Security
Overview
Aqua provides security tools for containers, Kubernetes, and cloud-native apps.
Key Features
- Image scanning for vulnerabilities, malware, and misconfigurations
- Runtime security with eBPF-based threat detection (built on Tracee)
- Kubernetes security posture management (KSPM)
- Infrastructure-as-code scanning for Terraform, CloudFormation, and Kubernetes
- Software Supply Chain Security: SBOM, signed images, and pipeline integrity
- Trivy open-source scanner is part of the Aqua ecosystem
Real-World Workflows
Shift-left security in the CI/CD pipeline
- 1Integrate the Aqua scanner into the CI pipeline after the Docker build
- 2Scanner checks for CVEs, embedded secrets, and Dockerfile misconfigurations
- 3Build fails if a critical vulnerability or policy violation is found
- 4Security findings are reported back to the developer in the CI log and PR
- 5Approved images are signed and stored in the registry for runtime enforcement
Runtime protection for Kubernetes workloads
- 1Deploy the Aqua enforcer as a DaemonSet on all Kubernetes nodes
- 2Define runtime policies: allow only signed images, block shell access in production
- 3Aqua blocks policy-violating containers from starting
- 4Runtime anomalies (unexpected file writes, network connections) trigger alerts
Getting Started
# Aqua requires a licensed deployment. # Try Trivy (free) from the same ecosystem: brew install aquasecurity/trivy/trivy trivy image alpine:latest
Compare Alternatives
See how Aqua Security stacks up against similar tools.