- Home
- Container Image Scanning Tools
- Aqua Container Security
Aqua Container Security
Boston, Massachusetts, United States and Ramat Gan, Israel
What it is
Aqua Container Security protects container applications from build through runtime across platforms and clouds. Its image scanner checks for vulnerabilities, malware, secrets, misconfigurations, and open-source issues. It prioritizes vulnerabilities using contextual factors such as exploitability, risk score, severity, and whether a workload is running. A secure virtual sandbox can run images to look for threats including fileless malware, supply chain attacks, and zero-day attacks.
Assurance policies can keep unapproved images from advancing to deployment. At runtime, granular policies are used to prevent drift, detect attacks, and block production threats. The product audits application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z; integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager. Aqua lists hybrid deployment and a customer support portal. Pricing is on request, and a free trial is available.
For and against
For
- Scans images for vulnerabilities, malware, secrets, and misconfigurations.
- Policies can block unapproved images before deployment.
- Runtime policies can detect attacks and block threats.
- Audits against NIST, PCI DSS, GDPR, and CIS Benchmarks.
Against
- Pricing is available on request.
- Plan pricing can depend on repositories or workloads.
The verdict
Aqua combines image scanning, admission policies, runtime controls, and compliance reporting for container applications. Teams will need to request pricing, and the listed plans include trial requests.
Who it suits
Aqua Container Security suits enterprise teams seeking container protection from image review through runtime. Its listed environments and compliance reporting cover a range of deployment contexts and standards.
Plans and prices
Cloud Security
Pricing based on number of workloads · Request a Trial
Read 28 Sep 2026 · aquasec.com
Dev Security
Pricing based on number of code repositories · Request a Trial
Read 28 Sep 2026 · aquasec.com
Platform
Get a Demo · Capabilities available across the platform
Read 28 Sep 2026 · aquasec.com
On the record
- Compliance certifications
- Aqua states that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II certifications.aquasec.com · read 28 Sep 2026
- Compliance reporting
- The product audits container application security posture against frameworks and standards including NIST, PCI DSS, GDPR, and CIS Benchmarks.aquasec.com · read 28 Sep 2026
- Federal authorization
- Aqua says it is FedRAMP authorized at the highest impact level and meets over 400 security controls and standards.aquasec.com · read 28 Sep 2026
- Image admission
- Assurance policies can prevent unapproved container images from advancing to deployment.aquasec.com · read 28 Sep 2026
- Image scanning
- Its scanner checks container images for vulnerabilities, malware, secrets, misconfigurations, and open source issues.aquasec.com · read 28 Sep 2026
- Integrations
- Listed integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager.aquasec.com · read 28 Sep 2026
- Lifecycle protection
- Aqua provides container protection across platforms and clouds from build through runtime.aquasec.com · read 28 Sep 2026
- Malware analysis
- Aqua runs images in a secure virtual sandbox to detect threats such as fileless malware, supply chain attacks, and zero-day attacks.aquasec.com · read 28 Sep 2026
- Risk prioritization
- Vulnerabilities are prioritized using contextual factors including exploitability, risk score, severity, and whether workloads are running.aquasec.com · read 28 Sep 2026
- Runtime protection
- Runtime security uses granular policies to prevent drift, detect attacks, and block threats in production.aquasec.com · read 28 Sep 2026
- Support
- Aqua provides a customer support portal.support.aquasec.com · read 28 Sep 2026
- Supported environments
- Aqua lists Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z among its environments.aquasec.com · read 28 Sep 2026
- Target customers
- Aqua describes container security for enterprise workloads and says it protects more than 500 of the world's largest enterprises.aquasec.com · read 28 Sep 2026
