Aqua Security

A cloud native security platform that scans images and infrastructure as code, then enforces workload policy at admission and at runtime with in-cluster agents.

A single binary that checks whether a Kubernetes node's configuration matches the CIS Kubernetes Benchmark, reporting each control as pass, fail or manual with remediation text.

A Terraform-specific static analyzer that evaluates HCL against cloud misconfiguration checks, now consolidated into Aqua's Trivy.

An open-source scanner that finds vulnerabilities, misconfigurations, secrets and license issues across container images, filesystems, repositories and IaC.