- Home
- Cloud Detection and Response Software
- Aqua Security
Aqua Security
Boston, Massachusetts, United States, and Ramat Gan, Israel
What it is
Aqua Security is paid software for securing development workflows, cloud workloads, containers, and Kubernetes environments. Its Dev Security plan includes code repository discovery and scanning, container image vulnerability and risk scanning, Dynamic Threat Analysis, Infrastructure-as-Code scanning, and SBOM generation and analysis. Cloud Security adds cloud and Kubernetes workload visibility, agentless workload scanning, real-time runtime protection, drift prevention, and compliance reporting. The Platform plan provides end-to-end software-development lifecycle visibility, risk prioritization, contextualized risk scoring, compliance and custom reporting, and role-based access control. Aqua lists runtime protection, Kubernetes security, image and registry scanning, admission control, and SBOM generation among its capabilities. Deployment is hybrid, with Linux and web platforms listed. Pricing is available on request and varies by repository count for Dev Security or workload count for Cloud Security; the Platform plan has no public price. Aqua Security was founded in 2015 and has headquarters in Boston and Ramat Gan.
For and against
For
- Covers development, cloud, and Kubernetes security
- Includes image and registry scanning
- Provides runtime protection and drift prevention
- Generates and analyzes SBOMs
- Offers role-based access control
Against
- No free plan is listed
- Pricing varies by repositories or workloads
- Platform pricing is not publicly shown
- Linux and web are the listed platforms
The verdict
Aqua Security brings development, workload, and platform controls into a paid hybrid offering. Its plan structure lets organizations focus on repositories, workloads, or broader lifecycle visibility, but pricing depends on scale and remains request-based.
Who it suits
It suits development, cloud, and security teams managing repositories, container images, workloads, or Kubernetes environments. Organizations needing hybrid deployment and compliance-oriented controls may consider its listed plans.
Plans and prices
Dev Security
Code repository discovery and scanning · Container image vulnerability and risk scanning · Dynamic Threat Analysis · Infrastructure-as-Code scanning
Read 22 Sep 2026 · aquasec.com
Cloud Security
Cloud and Kubernetes workload visibility · Agentless workload scanning · Real-time runtime protection · Drift prevention
Read 22 Sep 2026 · aquasec.com
Platform
End-to-end SDLC visibility · Risk prioritization · Contextualized risk scoring · Compliance and custom reporting
Read 22 Sep 2026 · aquasec.com