Aqua Container Security
Aqua Container Security protects container applications from image creation through runtime across platforms and clouds.
What Aqua Container Security is
Aqua Container Security protects container applications from image creation through runtime across platforms and clouds. Its scanner checks images for vulnerabilities, malware, secrets, misconfigurations, and open-source issues. It prioritizes vulnerabilities using contextual factors such as exploitability, severity, risk score, and whether workloads are running. Aqua can run images in a secure virtual sandbox to look for threats including fileless malware, supply chain attacks, and zero-day attacks. Assurance policies can keep unapproved images from moving toward deployment, while granular runtime policies help prevent drift, detect attacks, and block production threats. The product audits application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z. Aqua lists hybrid deployment, registry and CI pipeline scanning, Kubernetes admission, SBOM generation, and fix recommendations. Pricing is on request, and a free trial is available. Aqua provides a customer support portal.
Good
- Scans images for vulnerabilities, malware, secrets, and misconfigurations.
- Uses contextual factors to prioritize vulnerabilities.
- Policies can block unapproved images from deployment.
- Audits against NIST, PCI DSS, GDPR, and CIS Benchmarks.
- Free trial is available.
Watch out
- Pricing is available only on request.
Who it suits
It is intended for teams protecting container-based enterprise workloads across cloud and other listed environments. It may suit teams needing image scanning, runtime controls, and compliance reporting.
Verdict
Aqua Container Security covers image assessment, deployment controls, and runtime protection, with compliance audits and broad listed environment support. Pricing requires a request, though a trial is available.
Plans and prices
From Aqua Container Security's own pricing page, checked 28 Sep 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Cloud Security | Priced on request | Pricing based on number of workloads · Request a Trial |
| Dev Security | Priced on request | Pricing based on number of code repositories · Request a Trial |
| Platform | Priced on request | Get a Demo · Capabilities available across the platform |
The facts
Each one read from Aqua Container Security's own pages, with the date it was checked.
What it does
- Compliance certifications
- Aqua states that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II certifications.checked 28 Sep 2026
- Compliance reporting
- The product audits container application security posture against frameworks and standards including NIST, PCI DSS, GDPR, and CIS Benchmarks.checked 28 Sep 2026
- Federal authorization
- Aqua says it is FedRAMP authorized at the highest impact level and meets over 400 security controls and standards.checked 28 Sep 2026
- Image admission
- Assurance policies can prevent unapproved container images from advancing to deployment.checked 28 Sep 2026
- Image scanning
- Its scanner checks container images for vulnerabilities, malware, secrets, misconfigurations, and open source issues.checked 28 Sep 2026
- Integrations
- Listed integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager.checked 28 Sep 2026
- Lifecycle protection
- Aqua provides container protection across platforms and clouds from build through runtime.checked 28 Sep 2026
- Malware analysis
- Aqua runs images in a secure virtual sandbox to detect threats such as fileless malware, supply chain attacks, and zero-day attacks.checked 28 Sep 2026
- Risk prioritization
- Vulnerabilities are prioritized using contextual factors including exploitability, risk score, severity, and whether workloads are running.checked 28 Sep 2026
- Runtime protection
- Runtime security uses granular policies to prevent drift, detect attacks, and block threats in production.checked 28 Sep 2026
- Support
- Aqua provides a customer support portal.checked 28 Sep 2026
- Supported environments
- Aqua lists Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z among its environments.checked 28 Sep 2026
- Target customers
- Aqua describes container security for enterprise workloads and says it protects more than 500 of the world's largest enterprises.checked 28 Sep 2026
The company
- Founded
- 2015checked 28 Sep 2026
- Headquarters
- Boston, Massachusetts, United States and Ramat Gan, Israelchecked 28 Sep 2026
Alternatives to Aqua Container Security
- 1

Mondoo CSPM
Free planOpen sourceWebAPIExtensionLinux7.7Free plan - 2
Grype
Free planOpen sourceLinuxmacOSSelf-hostedWindows7.4Free plan - 3

Sysdig Secure
WebAPILinuxmacOS7.2From $20 a month - 4
Alibaba Cloud Container Registry
Free planWebAPILinuxWindows7.1Free plan - 5

Trivy
Free planLinuxmacOSSelf-hostedWindows7.0Free plan - 6

ZeroPath
WebAPILinuxmacOS6.5From $1,000 a month
