Trivy: cybersecurity software

Trivy is an amazing open source container, SCA, and IaC scanner provided by the team at Aqua Security. This awesome scanner powers a lot of tools under the hoods and is a great resource for the community.

What Trivy is

Trivy is an amazing open source container, SCA, and IaC scanner provided by the team at Aqua Security. This awesome scanner powers a lot of tools under the hoods and is a great resource for the community. The vendor site is www.aquasec.com. This profile is an entry in the oneNorma directory, not a vendor landing page.

What Trivy covers

Trivy is in the catalog for these capabilities. Categories: IaC, SCA, and Container Vulnerability. Catalog tags: Best for Startups, Best for MidMarket, Hands-on, and Open Source.

How to evaluate Trivy in a security program

Use Trivy as a stack candidate, not as diligence evidence. If the real gap is in IaC, SCA, and Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.aquasec.com publishes. Contrast it with pentesting and Security Cloud & Compliance.

Classification

Categories

IaCSCAContainer Vulnerability

Tags

Best for StartupsBest for MidMarketHands-onOpen Source

Capabilities by category

Container Vulnerability

Scanner

IaC

Code Scanner

Frequently asked questions

What is Trivy?

Trivy is an amazing open source container, SCA, and IaC scanner provided by the team at Aqua Security. This awesome scanner powers a lot of tools under the hoods and is a great resource for the community. Site: www.aquasec.com.

Which categories does Trivy fall into?

Trivy appears in the oneNorma directory under IaC, SCA, and Container Vulnerability. Use those labels to compare it with other vendors for the same problem, not as an official ranking.

Does oneNorma resell or implement Trivy?

No. The Trivy profile (www.aquasec.com) is for inventory and comparison. oneNorma delivers offensive and compliance evidence (pentesting, cloud compliance), not a vendor license.

Other cybersecurity vendors

More profiles from the vendor directory.