Skip to content
SPECIFICTION
Get listed

Aqua Container Security

aquasec.com

Free trial WebWindowsLinuxSelf-hosted
Visit aquasec.com
Spec score 8.1 #7 of 29 in Container Image Scanning Tools

What it is

Aqua Container Security protects container applications from build through runtime across platforms and clouds. Its image scanner checks for vulnerabilities, malware, secrets, misconfigurations, and open-source issues. Findings are prioritized using factors such as exploitability, severity, risk score, and whether workloads are running. Aqua can run images in a secure virtual sandbox to look for threats including fileless malware, supply chain attacks, and zero-day attacks. Assurance policies can prevent unapproved images from advancing to deployment, while runtime policies help prevent drift, detect attacks, and block threats in production. The product audits application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z. Integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager. Hybrid deployment, registry and CI pipeline scanning, Kubernetes admission, SBOM generation, and fix recommendations are listed. Pricing is on request; trials are available.

Spec sheet

Integrations
Listed integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager.Read 28 Sep 2026 · aquasec.com
Support
Aqua provides a customer support portal.Read 28 Sep 2026 · support.aquasec.com
Headquarters
Boston, Massachusetts, United States and Ramat Gan, IsraelRead 28 Sep 2026 · aquasec.com
Founded
2015Read 28 Sep 2026 · aquasec.com
Compliance certifications
Aqua states that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II certifications.Read 28 Sep 2026 · aquasec.com
Compliance reporting
The product audits container application security posture against frameworks and standards including NIST, PCI DSS, GDPR, and CIS Benchmarks.Read 28 Sep 2026 · aquasec.com
Federal authorization
Aqua says it is FedRAMP authorized at the highest impact level and meets over 400 security controls and standards.Read 28 Sep 2026 · aquasec.com
Image admission
Assurance policies can prevent unapproved container images from advancing to deployment.Read 28 Sep 2026 · aquasec.com
Image scanning
Its scanner checks container images for vulnerabilities, malware, secrets, misconfigurations, and open source issues.Read 28 Sep 2026 · aquasec.com
Lifecycle protection
Aqua provides container protection across platforms and clouds from build through runtime.Read 28 Sep 2026 · aquasec.com
Malware analysis
Aqua runs images in a secure virtual sandbox to detect threats such as fileless malware, supply chain attacks, and zero-day attacks.Read 28 Sep 2026 · aquasec.com
Risk prioritization
Vulnerabilities are prioritized using contextual factors including exploitability, risk score, severity, and whether workloads are running.Read 28 Sep 2026 · aquasec.com
Runtime protection
Runtime security uses granular policies to prevent drift, detect attacks, and block threats in production.Read 28 Sep 2026 · aquasec.com
Supported environments
Aqua lists Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z among its environments.Read 28 Sep 2026 · aquasec.com
Target customers
Aqua describes container security for enterprise workloads and says it protects more than 500 of the world's largest enterprises.Read 28 Sep 2026 · aquasec.com

Plans and prices

Cloud Security Priced on request Pricing based on number of workloads · Request a Trial Read 28 Sep 2026 · aquasec.com
Dev Security Priced on request Pricing based on number of code repositories · Request a Trial Read 28 Sep 2026 · aquasec.com
Platform Priced on request Get a Demo · Capabilities available across the platform Read 28 Sep 2026 · aquasec.com

Every Aqua Container Security plan and price →

Strong points and limits

Strong points

  • Image checks cover vulnerabilities, malware, and secrets
  • Policies can block unapproved images
  • Runtime controls help detect and block threats
  • SBOM generation and fix recommendations listed
  • Hybrid deployment

Limits

  • Pricing is on request
  • Trial requires a request
  • Listed plans do not provide prices

Who it suits

Aqua is aimed at teams protecting container workloads, including enterprise environments. It may suit teams needing image scanning, runtime controls, and compliance posture audits.

Verdict

Aqua covers container security from image scanning through runtime controls, with compliance audits and a broad list of supported environments. Request pricing and a trial to assess fit for your workload needs.

Where Specifiction places it

Alternatives to Aqua Container SecurityAll alternatives →