I like the nice dashboards, I like how vulnerability findings are presented and explained in detail. I also like the fact that it provides remediation options. It's much easier to fix a problem when you have a tool like this.

I like the policies that can be easily configured for extra protection.

I like how nice and helpful the Aqua team always is, answering all our questions and always taking the time to discuss with us. Review collected by and hosted on G2.com.

I think the initial config process was a bit long, but we managed to do it with the help of the Aqua team. Review collected by and hosted on G2.com.

It provides a complete solution for container security. I can scan images in my pipeline, in the registry, and at runtime. Therefore for product teams it become easy to shift the security left. Review collected by and hosted on G2.com.

I think every image scan by Aqua should be considered as registered image. At this point, I do not see the need to separating images based on where they are scanned. Review collected by and hosted on G2.com.

Remediation suggestions

categorization severity tabs

dependency list

Vulnerability list

Ease of implementation

Customer support Review collected by and hosted on G2.com.

Improvement on false positives common SAST request so... whatever.

Historical understandings by various repositories. To better understand where development could be consistently faltering. I'd like to drill down on a repository's history of fixes and flaws. Highlight what consistently reoccurs.

IDE integration.

Have seen other solutions provide a code path of the flaw. This would be extra helpful to finding the base source of the issue. Or understanding the actual severity of the issue.

Should add a jQuery version check to vulnerabilities. Known issues exist with older versions, security aggregate sites take points for older vulnerable jQuery versions.

A method to pick a set of issues and assign them to users/a method for users to pass to reviewers that integrate through third-party software like JIRA, seems available in CSPM.

Minor: when creating a new suppression rule for a specific line, auto refresh the page so the added suppression is active in the count. Review collected by and hosted on G2.com.

- supports different programming languages

- supports integration with different technology/platforms (Gitlab, Gitlab, Jenkins, Azure, etc.)

- Aquasec team is always working on improving the functionality

- Aquasec team takes customer feedback into consideration when designing new features/bug fixes

- product provides insight into different aspects of supply chain security - IaC misconfiguration, secret detection, dependency vulnerability, SAST, SBOM all under one platform

- security scan in CICD pipeline limited to modified code in merge request solves the issue of whole code repository scan, which often takes too long and is not scalable for environments with many repos

- most of the time customer support provides prompt response

- the UI is straightforward Review collected by and hosted on G2.com.

- some areas of the UI require improvement, for instance, if a column like file path is too long, we cannot expand the column to see the full path, need to hover on the condensed file path to get the information which could be time-consuming

- need to add more criteria on search filters, for instance, there is no way to search for suppression rules based on filters like code repository or controls

- need to include code line number in vulnerability finding report, not just the file name Review collected by and hosted on G2.com.

It's ease of deployment, nice UI, CI/CD integration options available, good dashboard and one of the key features for us would be Kubernetes security feature which is not there in a lot of other commercial tools. Review collected by and hosted on G2.com.

The licensing model is probably in line with Aquasec's long term plan but they should also consider some short term/low volume pricing models for clients who want to try container security before deciding for a long term full fledged solution. Review collected by and hosted on G2.com.

Ease of implementation and configuration was a big win for us to finish ahead of schedule. Dash intuitive and actionable Review collected by and hosted on G2.com.

The secrets detection has proven to be hit or miss for us Review collected by and hosted on G2.com.

After some growing pains, due to the size of our organization and the number of images we scan, it has been easy to implement docker image scanning into our build process. Review collected by and hosted on G2.com.

Some feature improvements that were often necessary for us to utilize portions of Aqua, took longer than expected and communicated to be completed. We had a request where we even included the source code changes that were needed from Aqua, and it still took almost 3 full quarters for the request to be completed. It felt like we understood the inner workings of that portion of the scan tool than their tech team and it was hard to have them understand the needed change. Review collected by and hosted on G2.com.

It offers clear, actionable recommendations for fixing vulnerabilities. No more guesswork, just practical steps to improve security posture. It intelligently prioritizes risks based on severity and potential impact, saving me the time and effort of sifting through irrelevant alerts. Review collected by and hosted on G2.com.

Aqua's interface can be a little complex at times, and the initial setup requires some technical expertise and loads of document reading. Review collected by and hosted on G2.com.

The CSPM is the tool I like most, it gives me and my team a detailed view into our compliance with different standards while also helping us to make our CSPs more secure. Review collected by and hosted on G2.com.

I would have mentioned the response to support tickets. However, I have noticed lots of improvements recently. Kudos to the Support team. Review collected by and hosted on G2.com.

Aqua container scanning capabilities are well integrated with common CI/CD tools/frameworks. Aqua has a good User Interface that makes vulnerability analysis and whitelisting very easy. Aqua is easy to implement on premises. Review collected by and hosted on G2.com.

Aqua container platform pricing model based on number of code repositories and enforces. You are forced to pay for features that you don't need or use. Review collected by and hosted on G2.com.