Aqua Security

Aqua Security provides security solutions designed for containerized and cloud‑native environments. Its core offering is the Aqua Platform, which combines image vulnerability scanning, runtime protection, and compliance controls. The company also maintains the open‑source Trivy scanner, a widely used tool for detecting vulnerabilities in container images and filesystem artifacts. These products are aimed at enterprises that adopt DevSecOps practices and need to secure their build‑to‑run lifecycle.

Aqua Security’s specialization lies in securing the container supply chain, a focus underscored by the 2026 incident in which attackers compromised the official Trivy releases. The breach showed that malicious code was injected into the Trivy binary, the trivy‑action GitHub Actions workflow, and related helper tools, allowing the stealer to run alongside the legitimate scanner. This event highlighted both the extensive adoption of Trivy across development pipelines and the importance of protecting the distribution channels of open‑source security tools. Aqua Security’s response emphasized the need for credential rotation and tighter workflow configurations to prevent similar supply‑chain attacks. Their expertise in integrating security scanning directly into CI/CD processes distinguishes them from more generic vulnerability management vendors.

The company’s headquarters is located in Israel, reflecting the country’s strong presence in cybersecurity innovation. While specific figures about employee count or revenue are not disclosed in the supplied information, Aqua Security continues to be recognized for its contributions to open‑source security tooling. Its platform is used by organizations seeking to enforce security policies throughout the container lifecycle, from image creation to runtime deployment.