Listopedia

Aqua Security Trivy

Open-source scanner for containers, Kubernetes, code and cloud configuration

Overview

Trivy is an open-source security scanner maintained by Aqua Security. It finds vulnerabilities, misconfigurations, secrets and software bills of materials in container images, code repositories, binary artifacts, container images and Kubernetes clusters, and can also check licences[13]. It is written in Go and distributed under the Apache-2.0 licence, and a new version is released every month[13].

Trivy has become a default choice in many continuous-integration pipelines because it runs as a single binary with no server, and its output can fail a build when serious vulnerabilities appear. Organisations such as Mirantis cite it on the project site, and independent practitioners describe choosing it after evaluating other open-source vulnerability scanners[13].

Aqua Security is privately held. Trivy itself is free; Aqua sells a commercial cloud-native application protection platform for organisations that need central management, runtime protection and support. Trivy does not scan running networks or web applications, so it complements rather than replaces a network scanner.

Aqua Security Trivy features

  • Container image vulnerability scanning
  • Kubernetes cluster scanning
  • Infrastructure-as-code misconfiguration checks
  • Secret detection
  • SBOM generation
  • Single binary for CI pipelines

Aqua Security Trivy pricing

Free and open source under Apache-2.0. Commercial support and management through Aqua Security's platform are quote-based.

Aqua Security Trivy strengths and limitations

Strengths

  • Free with a permissive licence
  • Covers many artifact types in one tool
  • Easy to add to CI pipelines
  • Monthly release cadence

Limitations

  • No network or web application scanning
  • Central reporting requires other tools or Aqua's platform
  • Community support only unless buying Aqua
  • Results need tuning to avoid noisy builds

Appears in

Aqua Security Trivy alternatives and competitors

Alternatives to Aqua Security Trivy: companies ranked in the same lists.

Is this your company?

Update the description, logo, image and link through the submission form. Editors review every change.

Update this listing

Is your company missing from a list?

Send your logo, description and link. Editors review every submission, and approved listings are clearly labelled.

Add your company