Seamless integration with your stack, across the cloud native ecosystem

Aqua provides a wide range of connectors for all stages of the cloud native application lifecycle

Protecting workloads running on Amazon ECS, Amazon EKS, AWS Fargate and AWS Lambda The first consumption-based container security solution available on AWS Marketplace for Containers Get Aqua from the AWS Marketplace

The complete security solution for containers and serverless workloads running on Azure Integrates with Azure DevOps, ACR, AKS, ACI and Azure Functions for seamless security and compliance. Get Aqua From The Azure Marketplace

Aqua Extends Alliance with Red Hat and IBM, Bringing Cloud Native Security to the Red Hat Marketplace Simplified steps to find and purchase the Aqua Platform that is tested, certified and supported on Red Hat OpenShift. Removed operational barriers to deploy and manage Aqua on K8s native infrastructure to secure your applications. Get Aqua from the Red Hat Marketplace

Deployed through the Google Cloud Marketplace The Aqua Platform allows development, operations and security teams to establish a common, policy-driven approach to deliver secure code faster, prioritize risks and stop runtime attacks as they happen. The platform delivers consistent enforcement and consolidated visibility for hybrid and multi-cloud infrastructure and workloads while ensuring real-time, granular protection for Linux and Windows containerized applications running on Google Kubernetes Engine. Get Aqua from Google Cloud Marketplace

Aqua Security Platform Integrations

All

Registries

CI/CD

DevOps Tools

Container Platforms

Service Mesh

Serverless

Cloud Providers

Vaults

Security & SIEM

Kubermatic Kubermatic Kubermatic empowers organizations worldwide to fully automate their Kubernetes and cloud-native operations across multi-cloud, edge and on-prem. About Kubermatic

AWS Secrets Manager AWS Secrets Manager Manage, retrieve, and rotate database credentials, API keys, and other secrets on AWS Secrets Manager; Then securely deliver them to running containers with no container restart needed and no persistence on the host OS.

Amazon Security Lake Amazon Security Lake The Amazon Security Lake collects security data from AWS environments. It uses the Open Cybersecurity Schema Framework to standardize and combine the data, making it easier to investigate security concerns and quickly respond to incidents.

Servicenow Servicenow Orchestrate incident management responses based on Aqua Security findings with automated ServiceNow integration. Leverage Aqua Response Policies for event notifications to direct and manage via ServiceNow workflows. Learn More

Docker Docker Aqua provides end-to-end security for applications running on Docker Enterprise Edition or Community Edition, protecting the DevOps pipeline and production workloads in runtime with full visibility and control. Learn More

Mirantis Kubernetes Engine Mirantis Kubernetes Engine Enhance Mirantis Kubernetes Engine security controls with deep image scanning, image assurance, and runtime security controls for container workloads, on Kubernetes and Swarm. Learn More

Terraform Terraform Declaratively define the configuration for your Aqua Enterprise platform using the validated Terraform provider, ensuring that security teams can automate governance and audit of deployment operations. Learn More

Google Artifact Registry Google Artifact Registry Detect and identify vulnerabilities, malware, and secrets for Google Artifact Registry through continuous scanning of images, programming languages and packages.

AWS Management and Governance Lens AWS Management and Governance Lens Ensure through ongoing checks and validations that your AWS accounts and services are configured according to the AWS Well-Architected Framework Management & Governance Lens for optimizing management and governance across AWS environments. Learn More

AWS Lambda AWS Lambda Protect AWS Lambda Functions, with risk assessment by the discovery of over-provisioned permissions and roles, embedded access credentials, keys and vulnerabilities. Learn More

AWS Fargate AWS Fargate Secure Applications running on AWS Fargate, with the Aqua MicroEnforcer embedded in the containers to ensure that workloads perform their intended function, and detect vulnerable or compromised containers. Learn More

AWS CloudFormation AWS CloudFormation Automate and streamline how the Aqua platform and components are installed across multiple AWS accounts and regions using CloudFormation templates for provisioning logic. AWS CloudFormation with Trivy

Azure Kubernetes Service (AKS) Azure Kubernetes Service (AKS) Protect cloud native workloads on AKS with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale. Learn More

VMware Tanzu Kubernetes Grid VMware Tanzu Kubernetes Grid Aqua secures the software supply chain, detects, prioritizes and reduce risks, and stops run-time attacks for applications built and deployed on VMware TKG with a comprehensive cloud native security platform.

Google Anthos Google Anthos Protect cloud native workloads running on Google Anthos, enabling consistent security controls across private and public Google Cloud deployments. Learn more

Brinqa Brinqa Integrate with Brinqa to provide visibility into cloud native risks and vulnerabilities. Watch the joint webinar

AWS Security Hub AWS Security Hub Provides security teams with granular visibility into vulnerabilities and threats in cloud native applications, for faster response and better risk management in cloud native workloads running on Amazon ECS, EKS, or other orchestrators. Learn More

OpsGenie OpsGenie Open tickets in OpsGenie for scanning, assurance and runtime security events discovered by Aqua, for rapid incident response and remediation.

Azure Service Fabric Azure Service Fabric Automate the deployment of Aqua Enforcers and Aqua Scanner instances with Azure Service Fabric, ensuring that your Azure and Windows-based container applications are protected.

AWS App Mesh AWS App Mesh Gain visibility into AWS App Mesh routings and configure network security policies, protect the Envoy proxy containers, and prevent malicious activity. Learn more

Amazon Web Services Amazon Web Services Protect cloud native workloads running on AWS from development to production, including Amazon ECS, Amazon EKS, AWS Fargate, and AWS Lambda. Get Aqua from AWS Marketplace

Amazon EKS-Distro (EKS-D) Amazon EKS-Distro (EKS-D) Amazon EKS-Distro enables using the same tools on-prem as your cloud destination. Aqua's holistic Kubernetes security includes KSPM to deliver EKS security

Amazon Elastic Container Service (ECS) Amazon Elastic Container Service (ECS) Protect cloud native workloads on Amazon ECS with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale. Get Aqua from AWS Marketplace

Istio Istio Gain visibility into Istio routings and configure network security policies, protect the Envoy proxy containers, and prevent malicious activity.

Prometheus Prometheus Allow DevOps teams to monitor and alert on events sent from Aqua CSP, in real-time, directly from the Prometheus dashboards.

Harbor Harbor Continuously scan container images in Harbor for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

Google Cloud Functions Google Cloud Functions Ensure Google Cloud Functions meet assurance policies before being launched into production, with automated scans for vulnerabilities and sensitive data.

Azure Functions Azure Functions Assess the risk of Azure Functions by discovering vulnerabilities and sensitive data in function’s code and its environment variables. Prevent execution of functions that violate your organization’s security policy.

GKE Autopilot GKE Autopilot Secure the application lifecycle with image scanning and dynamic malware detection, protect Kubernetes workloads and manage role-based access controls for multi-team clusters with seamless GKE Autopilot integration. Protecting Cloud Native Workloads on GKE Autopilot

Slack Slack Send notifications on vulnerabilities and security events discovered by Aqua via dedicated Slack channels for rapid remediation and incident response.

Pagerduty Pagerduty Send notifications on vulnerabilities and security events discovered by Aqua via PagerDuty alerts for rapid remediation and incident response. Learn More

ARM ARM Enforce run time controls based on container behavioral profiling, prevent image drift and protect against unauthorized network connections for workloads running on any ARM-based processors, including AWS Graviton2. Learn More

Tanzu Application Service Tanzu Application Service Protect applications running on Tanzu Application Service across their entire lifecycle, from scanning droplet for vulnerabilities and embedded secrets, to securing app instance and Diego cells in runtime.

Amazon Elastic Container Service for Kubernetes (EKS) Amazon Elastic Container Service for Kubernetes (EKS) Protect cloud native workloads on Amazon EKS with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale Get Aqua from the AWS Marketplace

Kubernetes Kubernetes Enhance Kubernetes native security with deep image scanning, image assurance, and runtime security controls for container workloads, at enterprise scale.

Azure Container Instances (ACI) Azure Container Instances (ACI) Protect applications running on Azure Container Instances, using Aqua MicroEnforcer embedded in the containers to ensure that workloads perform their intended function and detect vulnerable or compromised containers.

Google Kubernetes Engine (GKE) Google Kubernetes Engine (GKE) Protect cloud native workloads on GKE with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale. Get Aqua from GCP Marketplace

Oracle Container Engine (OKE) Oracle Container Engine (OKE) Prevent untrusted images from running and assure compliant configurations for Oracle Container Engine for Kubernetes. Aqua delivers real-time visualization and actionable insights into the security posture of a Container Engine cluster.

Red Hat OpenShift Red Hat OpenShift Protect cloud native workloads on Red Hat OpenShift with full lifecycle security controls that include image scanning, secrets management, and runtime security at scale. Learn More

IBM Cloud Private IBM Cloud Private Protect cloud native workloads on IBM Cloud Private with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale. Learn More

SUSE Kubernetes SUSE Kubernetes Protect cloud native workloads on SUSE Kubernetes with full lifecycle security controls that include image scanning, secrets management, and runtime security at scale. Learn More

Rancher Rancher Protect cloud native workloads on Rancher with full lifecycle security controls that include image scanning, secrets management, and runtime security at scale.

VMware Tanzu Kubernetes Grid VMware Tanzu Kubernetes Grid Protect cloud native workloads on Tanzu Kubernetes Grid with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale.

sumo logic sumo logic Provide DevOps teams with visibility into real-time container security metrics and events in Sumo Logic, to enable quick remediation of security issues.

IBM QRadar IBM QRadar Provide security teams with centralized visibility into container and serverless function vulnerabilities and runtime security events, within IBM QRadar.

Loggly Loggly Send container and serverless security events to Loggly for centralized events management and incident response.

Amazon CloudWatch Amazon CloudWatch Provide DevOps teams with visibility into real-time container security metrics and events in AWS CloudWatch, to enable quick remediation of security issues.

Azure Operations Management Suite (OMS) Azure Operations Management Suite (OMS) Provide security and DevOps teams with centralized visibility into container and serverless function vulnerabilities and runtime security events, within Azure OMS.

Micro Focus ArcSight Micro Focus ArcSight Provide security teams with centralized visibility into container and serverless function vulnerabilities and runtime security events, within ArcSight.

Datadog Datadog Provide DevOps teams with visibility into real-time container security metrics and events in Datadog, to enable quick remediation of security issues. Learn More

Red Hat Quay Red Hat Quay Continuously scan container images in Red Hat Quay for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

Sonatype Nexus Repository Sonatype Nexus Repository Continuously scan container images in Sonatype Nexus for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

JFrog Artifactory JFrog Artifactory Continuously scan container images in Artifactory for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

Google Container Registry (GCR) Google Container Registry (GCR) Continuously scan container images in Google Container Registry for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

Mirantis Secure Registry Mirantis Secure Registry Continuously scan container images in Mirantis Secure Registry for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

Azure ACR Azure ACR Continuously scan container images in Azure Container Registry for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues. Learn More

Amazon ECR Amazon ECR Continuously scan container images in Amazon ECR for known vulnerabilities, embedded secrets, OSS licenses, malware, and configuration issues.

GitLab GitLab Automate container image scanning in GitLab CI/CD pipelines to empower DevOps to detect and fix security issues early, and accelerate application deployment. Read the GitLab Case Study

Atlassian Bamboo Atlassian Bamboo Automate container image scanning in Bamboo CI/CD pipelines to empower DevOps to detect and fix security issues early, and accelerate application deployment. Get Aqua Plugin for Bamboo

Azure DevOps Azure DevOps Scan images and functions directly in Azure DevOps CI/CD pipelines to empower DevOps to detect and fix security issues early, and accelerate application deployment. Get Aqua for Azure DevOps

CodeFresh CodeFresh Automate container image scanning in CodeFresh CI/CD pipelines to empower DevOps to detect and fix security issues early, and accelerate application deployment. Learn more

CyberArk Conjur CyberArk Conjur Automate injection at run time of secrets stored and managed by Conjur Enterprise Edition and OSS into cloud native environments with certified integration Get it from the CyberArk marketplace

CyberArk Enterprise Password Vault CyberArk Enterprise Password Vault Securely deliver secrets managed in CyberArk EPV into running containers, on any orchestrator, with no container restart and no persistence on host.

HashiCorp Vault HashiCorp Vault Securely deliver secrets managed in HashiCorp Vault into running containers, on any orchestrator, with no container restart and no persistence on host. Learn More

Splunk Splunk The Splunk integration brings cloud native security data into the Splunk dashboard, allowing holistic monitoring in real-time, better contextual analysis, ability to view analyze blocked events, identification of attacks and suspicious activity and accurate forensics, alerts of any security compliance violations, and more. Learn More

VMware AppDefense VMware AppDefense Centrally secure VM-based and containerized applications, getting a real-time stream of container security data within VMware AppDefense. Learn More

Atlassian Jira Atlassian Jira Automatically open tickets for vulnerabilities and security issues discovered by Aqua, to enable rapid remediation by DevOps teams.

D2IQ Kubernetes Platform (DKP) D2IQ Kubernetes Platform (DKP) Protect cloud native workloads on D2IQ Kubernetes Platform (DKP) with full lifecycle security controls that include image scanning, secrets management, and runtime security at scale.

IBM Cloud Kubernetes Service IBM Cloud Kubernetes Service Protect cloud native workloads on IBM Cloud Kubernetes Service with full lifecycle security controls, including image scanning, secrets management, and runtime security at scale. Learn More

Azure Key Vault Azure Key Vault Securely deliver secrets managed in Azure Vault into running containers, on any orchestrator, with no container restart and no persistence on host.

AWS Key Management Service (KMS) AWS Key Management Service (KMS) Securely deliver secrets managed in Amazon KMS into running containers, on any orchestrator, with no container restart and no persistence on host.

Oracle Cloud Infrastructure Oracle Cloud Infrastructure Use Aqua Cloud Security Posture Management (CSPM) to reduce risks in your Oracle public cloud, including, best practices, comprehensive policies coverage, remediation assistance and compliance.

Microsoft Azure Microsoft Azure Protect cloud native workloads running on Azure from development to production, including Azure Container Service (AKS), Azure Container Instances (ACI) and Azure Functions. Learn More

IBM Cloud IBM Cloud Protect cloud native workloads running on IBM Cloud Kubernetes Service and IBM Cloud Private, from development to production, at enterprise scale. Learn More

Google Cloud Platform Google Cloud Platform Protect cloud native workloads running on Google Kubernetes Engine (GKE) from development to production, deploy as a Kubernetes App from the GCP Marketplace. Learn More

Alibaba Cloud Alibaba Cloud Identify and remediate misconfigurations and high-risk settings for Alibaba Cloud with Aqua’s Cloud Security Posture Management, and secure Alibaba Cloud Container Service for Kubernetes infrastructure and workloads with host scanning, assurance policies and run time protection.

Jenkins Jenkins Automate container image scanning in Jenkins CI/CD pipelines to empower DevOps to detect and fix security issues early, and accelerate application deployment. Learn More

Aqua works with the tools you already use. Ready to secure your cloud native applications? Get Aqua

More Useful Resources

Blog

Identify Security Risks in AWS CloudFormation Templates with Trivy

Read the Blog

Blog

Securing Containers on OpenShift

Blog

Securing Container Workloads on AWS Bottlerocket

Read the Blog

Blog

Aqua MicroScanner:
Free Image Vulnerability Scanning Plugin for Jenkins