What Aqua Security is
Aqua Security built a lot of the open source projects that power modern cloud security, and can go feature for feature with most other CNAPP platforms. The downside of the CNAPP has been the UI/UX, and the focus has always been on container protection more than holistic cloud security features. The vendor site is www.aquasec.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Aqua Security covers
Aqua Security is in the catalog for these capabilities. Categories: Kubernetes Security, SCA, SAST, Container Vulnerability, IaC, CNAPP, and CSPM. Catalog tags: Hands-on, Nerdy, Open Source, and Best for MidMarket.
How to evaluate Aqua Security in a security program
Use Aqua Security as a stack candidate, not as diligence evidence. The oneNorma score for Aqua Security is 5.5/10 (percentile 65). If the real gap is in Kubernetes Security, SCA, SAST, Container Vulnerability, IaC, CNAPP, and CSPM, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.aquasec.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
