Aqua Security
Runtime enforcement for containers, serverless functions and VMs, with operation in disconnected environments
Quick Overview
| Company | Aqua Security Software Ltd. |
|---|---|
| Category | Cloud Security Platforms (CNAPP) |
| Headquarters | Ramat Gan, Israel |
| Founded | 2015 |
| EU Presence | Yes - Israel |
| Data Location | Not stated on public pages |
| Open Source | No |
| GDPR Compliant | Yes |
| Self-Hosting | Agent enforcement works air-gapped |
| Main Features | Runtime protection, container security, CWPP, Kubernetes security, CSPM, code and supply chain scanning, GenAI application security, IBM Z mainframe security |
| Pricing | See website (no prices published) |
| Best For | Enterprises that need to block activity inline, including in air-gapped environments |
| Replaces | Wiz, Prisma Cloud, Sysdig |
Detailed Review
Aqua argues that visibility alone does not stop an attack, and builds its product around enforcing policy where code executes. The site says it was founded in 2015 and is headquartered in Boston and Ramat Gan.
The privacy policy names Aqua Security Software Ltd., with a UK representative entity, Aqua Security Software UK Ltd.
Enforcement at the point of execution
An agent applies runtime policy locally and can contain a workload without waiting for a patch. The site notes this still works when environments are disconnected or air gapped.
That makes it one of the few options here for isolated networks.
Wide environment coverage
Listed environments include Kubernetes, OpenShift, Docker, VMware Tanzu, the three large clouds and IBM Z mainframes.
Mainframe coverage is rare in this category.
Code to runtime in one lifecycle
Besides runtime, the platform has code scanning, supply chain security, CI/CD pipeline checks and posture management.
Aqua also offers GenAI application security, which was generally available at the time of checking.
Limitations to Consider
Aqua's own terms bind the user to Aqua Security Software Ltd. or any of its affiliates, and the company also lists Boston as a headquarters, so confirm which entity signs your contract. No prices are published. The agent architecture needs deployment and upkeep on every workload host.
Who Should Use Aqua Security
Large enterprises and regulated operators that need inline blocking, including in disconnected or mainframe environments.
Pros and Cons
Pros
- Inline runtime enforcement
- Works in air-gapped setups
- Mainframe and VMware coverage
- Full lifecycle from code scanning to runtime
- Named Israeli company in privacy policy
Cons
- Contracting entity may be an affiliate
- No published pricing
- Agents to deploy
- Large product to learn
Alternatives to Aqua Security
Other European cloud security platforms (cnapp) worth comparing before you decide:
Aikido Security
Belgium · Ghent platform that joins code, container and cloud posture checks
ARMO
Israel · Runtime-driven Kubernetes and cloud security built on Kubescape
Sweet Security
Israel · Runtime-first CNAPP that reasons from live workload behaviour
Orca Security
Israel · Agentless SideScanning CNAPP from Tel Aviv across six clouds
See all European cloud security platforms (cnapp) or compare them directly against Wiz on our alternatives page.
Frequently Asked Questions
Yes, its site describes an agent-based architecture that enforces protection locally.
The site states protection works even when environments are disconnected or air gapped.
The site says Boston and Ramat Gan, Israel; the privacy policy names Aqua Security Software Ltd.