Amazon Inspector vs Aqua Container Security
Amazon Inspector
aws.amazon.comAqua Container Security
aquasec.comSide by side
| Figure | Amazon Inspector | Aqua Container Security |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| Linux | — | Yes |
| API | Yes | — |
| Self-hosted | — | Yes |
| Plans published | 3 | 3 |
| Spec score · Container Image Scanning Tools | 7.7 (#9) | 8.1 (#7) |
| Integrations | Findings are aggregated in the Inspector console, routed to AWS Security Hub, and pushed through Amazon EventBridge; container findings are also sent to Amazon ECR. | Listed integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager. |
| Risk prioritization | It calculates contextualized risk scores by correlating CVE information with factors such as network access and exploitability. | Vulnerabilities are prioritized using contextual factors including exploitability, risk score, severity, and whether workloads are running. |
Plans
Amazon Inspector
- 15-day free trialFree
- Azure scanning free trialFree
- Amazon Inspector pay-as-you-goPrice not published
Aqua Container Security
- Cloud SecurityPriced on request
- Dev SecurityPriced on request
- PlatformPriced on request
In their own words
Amazon Inspector
Amazon Inspector has no write-up on Specifiction yet; its figures are above.
Aqua Container Security
Aqua Container Security protects container applications from build through runtime across platforms and clouds. Its image scanner checks for vulnerabilities, malware, secrets, misconfigurations, and open-source issues. Findings are prioritized using factors such as exploitability, severity, risk score, and whether workloads are running. Aqua can run images in a secure virtual sandbox to look for threats including fileless malware, supply chain attacks, and zero-day attacks. Assurance policies can prevent unapproved images from advancing to deployment, while runtime policies help prevent drift, detect attacks, and block threats in production. The product audits application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z. Integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager. Hybrid deployment, registry and CI pipeline scanning, Kubernetes admission, SBOM generation, and fix recommendations are listed. Pricing is on request; trials are available.