Freedom251 › Container Image Scanning Tools
Aqua Container Security
What Aqua Container Security is
Aqua Container Security protects container applications from build through runtime across platforms and clouds. It scans images for vulnerabilities, malware, secrets, misconfigurations, and open-source issues, then prioritizes findings using factors such as exploitability, severity, risk score, and whether workloads are running. Images can be analyzed in a secure virtual sandbox for threats including fileless malware, supply chain attacks, and zero-day attacks. Assurance policies can stop unapproved images from advancing to deployment, while granular runtime policies help prevent drift, detect attacks, and block production threats. The product audits application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z. Aqua lists hybrid deployment, registry and CI pipeline scanning, Kubernetes admission, SBOM generation, and fix recommendations. Pricing is on request; trials are available. Aqua describes the product for enterprise workloads and lists a customer support portal.
Who it suits
It suits organizations securing container workloads across build and runtime, including teams using the listed cloud, Kubernetes, and registry environments. Pricing is on request, and a trial is available.
What it does well
- Scans images for vulnerabilities, malware, secrets, and misconfigurations.
- Uses contextual factors to prioritize vulnerabilities.
- Policies can block unapproved images from deployment.
- Audits against NIST, PCI DSS, GDPR, and CIS Benchmarks.
- Includes SBOM generation and fix recommendations.
What to know first
- Pricing is on request.
- Listed plans base pricing on repositories or workloads.
- Trials are requested rather than listed as self-serve.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Dev Security | Pricing based on number of code repositories · Request a Trial | On request |
| Platform | Get a Demo · Capabilities available across the platform | On request |
| Cloud Security | Pricing based on number of workloads · Request a Trial | On request |
As aquasec.com lists them, read 28 Sept 2026. The maker's own page has the final word.
Getting started
- Visit the Aqua Container Security website.
- Request a trial for the Dev Security or Cloud Security plan, with pricing based on code repositories or workloads.
- Request a demo to explore the Platform plan.
- Choose a hybrid deployment across the listed Linux, Windows, web, or self-hosted platforms.
Verdict
Aqua combines image scanning, deployment controls, runtime protection, and compliance reporting for container environments. Buyers should expect to request pricing and a trial rather than select a published price.
Questions
How much does Aqua Container Security cost?
Pricing is available on request. Dev Security pricing is based on the number of code repositories, and Cloud Security pricing is based on the number of workloads.
Is there a free trial?
Yes. The Dev Security and Cloud Security plans offer a trial request route.
What platforms and environments does it support?
Listed platforms are Linux, Windows, web, and self-hosted, with hybrid deployment. Listed environments include Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z.
What integrations are listed?
Integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager.
What compliance standards does it cover?
It audits container application security posture against NIST, PCI DSS, GDPR, and CIS Benchmarks. Aqua also states that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II certifications.
Who makes Aqua Container Security?
Aqua is the maker. It was founded in 2015 and lists headquarters in Boston, Massachusetts, United States, and Ramat Gan, Israel.
Facts from Aqua Container Security's own pages
- Compliance certifications
- Aqua states that it holds ISO/IEC 27001:2022, ISO/IEC 27701:2019, ISO/IEC 27017:2015, ISO/IEC 27018:2019, and SOC 2 Type II certifications. · aquasec.com, 28 Sept 2026
- Compliance reporting
- The product audits container application security posture against frameworks and standards including NIST, PCI DSS, GDPR, and CIS Benchmarks. · aquasec.com, 28 Sept 2026
- Federal authorization
- Aqua says it is FedRAMP authorized at the highest impact level and meets over 400 security controls and standards. · aquasec.com, 28 Sept 2026
- Founded
- 2015 · aquasec.com, 28 Sept 2026
- Headquarters
- Boston, Massachusetts, United States and Ramat Gan, Israel · aquasec.com, 28 Sept 2026
- Image admission
- Assurance policies can prevent unapproved container images from advancing to deployment. · aquasec.com, 28 Sept 2026
- Image scanning
- Its scanner checks container images for vulnerabilities, malware, secrets, misconfigurations, and open source issues. · aquasec.com, 28 Sept 2026
- Integrations
- Listed integrations include AWS Fargate, Azure Container Apps, Google Artifact Registry, Harbor, ServiceNow, and AWS Secrets Manager. · aquasec.com, 28 Sept 2026
- Lifecycle protection
- Aqua provides container protection across platforms and clouds from build through runtime. · aquasec.com, 28 Sept 2026
- Malware analysis
- Aqua runs images in a secure virtual sandbox to detect threats such as fileless malware, supply chain attacks, and zero-day attacks. · aquasec.com, 28 Sept 2026
- Risk prioritization
- Vulnerabilities are prioritized using contextual factors including exploitability, risk score, severity, and whether workloads are running. · aquasec.com, 28 Sept 2026
- Runtime protection
- Runtime security uses granular policies to prevent drift, detect attacks, and block threats in production. · aquasec.com, 28 Sept 2026
- Support
- Aqua provides a customer support portal. · support.aquasec.com, 28 Sept 2026
- Supported environments
- Aqua lists Kubernetes, OpenShift, AWS, Azure, Google Cloud, VMware Tanzu, Docker, and IBM Z among its environments. · aquasec.com, 28 Sept 2026
- Target customers
- Aqua describes container security for enterprise workloads and says it protects more than 500 of the world's largest enterprises. · aquasec.com, 28 Sept 2026
Where Aqua Container Security stands on Freedom251
- Container Image Scanning Tools#12 of 29