Vulnerability Scanning and Management
Protect cloud native applications by minimizing their attack surface, detecting vulnerabilities, embedded secrets, and other security issues during the development cycle. Gain insight into your vulnerability posture and prioritize remediation and mitigation according to contextual risk.
Get StartedVulnerability Scanning on Aqua Wave and Aqua Enterprise
Best in Class Vulnerability Intelligence Feed
Aqua’s CyberCenter feed is updated daily, providing extensive OS and programming language coverage, application dependency detection, and reduction in false positives and false negatives based on proprietary algorithms reconciling multiple sources (NVD, vendor advisories, and Aqua research)
CI/CD Integration
Scan container images and functions in your CI pipeline, alerting on or failing those that violate your policies, providing direct and immediate feedback to developers. Natively integrates with Jenkins, Azure DevOps, Bamboo, GitLab, and more.
Scanning Registries and Stored Functions
Continuously and efficiently scan registries and functions for ongoing visibility into vulnerability and risk posture, applying updated threat intelligence to identify newly affected packages and applications.
Vulnerability Management Workflow
Get actionable remediation information for each vulnerability. Follow the instructions to remediate at the source, choose mitigation with Aqua vShield, or acknowledge the vulnerability to defer its remediation for a specified time.
Identifying Vulnerabilities by Image Layer
Assess the risk of a layer before reusing it in other images by identifying the vulnerability in one of its components, expose the specific layer of the image and speed up remediation by either update the vulnerable package, or roll back the image to a previous version.
Beyond Vulnerabilities
Comprehensively scan VM images, container images and serverless functions for embedded secrets, OSS licensing issues, hidden malware, configuration issues, and over-provisioned permissions. Use Aqua’s flexible assurance policies to set thresholds for each finding that flag artifacts as non-compliant and prevent their progression through the pipeline to production.
