What is Aqua Cloud Native Security Platform?

The Aqua Platform is an integrated Cloud Native Application Protection Platform (CNAPP), that prioritizes risk and automates prevention while also focussing on detection and response across the lifecycle. It aims to stop current and prevent future cloud native attacks.

Categories & Use Cases

William Huang

Lead Security Architect in Information Technology at RH (1001-5000 employees employees)

Use Cases and Deployment Scope

I am mainly using the workload protection to enhance our container security. The Aqua Cloud Native Security Platform workload protection help us gain visibilities and control of container images and running containers effortlessly. The integration with jfrog, GitHub etc are seamless and configuration of policy is very straightforward. With this tool, it fills the security gap for us in the area of container security.

Pros

seamless integration with GitHub, Jfrog, etc
Easy configuration of security policy
detailed instructions regarding finding of Vulnerabilities

Cons

Jira integration
SIEM integration

Most Important Features

integration of source code management tools
customize policy configuration
Accurate detection of Vulnerabilities with minimal false positives

Return on Investment

ROI is high with our Aqua project.

Other Software Used

AWS CloudTrail, Cisco Secure Cloud Analytics (Cisco Stealthwatch Cloud), Cloudflare Zero Trust Services

Avinash Upadhyaya K R View profile

DevOps Engineer in Engineering at HashedIn (1001-5000 employees employees)

Use Cases and Deployment Scope

We use Aqua Cloud Native Security Platform for indentifying vulnerabilities and issues in our cloud platforms such as AWS, Azure, Google Cloud and OCI. Container images are scanned with the Aqua platform through the integration of container registries. The platform provides an excellent overview of the security and compliance of our cloud platforms with a single customisable dashboard along with the possibilty of sending real time alerts for any vulnerability or issue in our platform.

Pros

Allow to visualise detailed results with option to filter based on certain properties
Create alerts for security issues based on Severity/Domain/Category/Plugin with quite a few notification channels
Provides compliance details across over 22 compliance programs
RBAC with granular access control
Customisable dashboards for Cloud Security and Image Scanning

Cons

The UI/UX of the Aqua platform has several issues, especially with the sign up/in flow, authentication, alerts and display of results
Missing a few prominent notification channels for alerts such as Datadog, Webhooks
Lacks complete granularity in RBAC with the ability to set permissions based on the cloud
Some parts of the cocumentation for connecting an Oracle Cloud account is not up to update or clear

Most Important Features

Complaince scanning
Alerts for critical vulnerabilities
Role Based Access for users (RBAC)

Return on Investment

Identified issues with our cloud platforms, preventing security exploits on our platforms

Other Software Used

Oracle Cloud Infrastructure, PagerDuty, Microsoft Azure

Usability

Snyk

Lacework

Wiz

Orca Cloud Security Platform

Aqua Cloud Native Security Platform

What is Aqua Cloud Native Security Platform?

Categories & Use Cases

Reviews