Aqua Security

Profile narrative

Aqua Security, also known by its alias Aqua Security, is headquartered in Israel and focuses on providing security solutions for cloud‑native environments. The organisation’s primary offering is the Trivy vulnerability scanner, a tool designed to detect security issues in container images, file systems, and infrastructure as code. Trivy is distributed through official GitHub releases, Docker Hub, and other container registries, making it accessible to developers and DevOps teams worldwide. By integrating directly into CI/CD pipelines, the scanner helps organisations identify vulnerabilities early in the software development lifecycle. Aqua Security positions itself as a specialist in container and Kubernetes security, addressing the growing need to protect modern application workloads. The company’s technology is aimed at enterprises seeking to enforce security policies without slowing down deployment processes.

In February 2026, Aqua Security’s Trivy scanner was compromised when attackers injected credential‑stealing malware into its official GitHub Action, helper action, and binary, which were then propagated via the same distribution channels. The malicious code harvested over 500,000 login credentials, including cloud tokens, SSH keys, and Kubernetes secrets, affecting roughly 10,000 CI/CD workflows. Stolen credentials were subsequently used by the Vect ransomware group in collaboration with TeamPCP, leading to confirmed ransomware deployments. Security researchers characterised the incident as an example of an industrialised ransomware supply‑chain model, prompting the FBI to issue a flash warning about TeamPCP’s credential‑theft activities. This event underscores the broad adoption of Aqua Security’s tools within DevOps ecosystems and highlights the critical importance of securing software supply chains. No explicit information about the organisation’s size, ownership, or parent/subsidiary relationships is available in the provided sources.

Incidents

1 incident linked to this organisation.