What does Aqua Security sell?

Aqua Security sells Aqua Security Platform. Aqua Security Platform: Cloud native application protection platform for development through production.

Who does Aqua Security fit?

From its own pages, Aqua Security sells mainly to organizations running cloud native applications and workloads in containers, Kubernetes, serverless functions and VMs. Aqua Security says its platform covers public cloud, private cloud, hybrid cloud and on-premises environments, including air gapped settings. Secure AI is aimed at teams running AI applications on Kubernetes and IBM Z mainframes.

How does CISO Tribune file Aqua Security?

CISO Tribune files Aqua Security under Cloud-native application protection (CNAPP), with Cloud workload protection and Software supply chain security as secondary categories.

Where is Aqua Security headquartered?

Aqua Security is headquartered in Boston, United States.

When was Aqua Security founded?

Aqua Security was founded in 2015.

Who owns Aqua Security?

Aqua Security is privately held.

Company record · security vendor

Aqua Security

Where Aqua Security appears on the record (54)

Every page on CISO Tribune and its network that carries this company, 54 in all.

Compared with (51): vs ABIR Networks, vs AccuKnox, vs Alphabet, vs Anchore, vs Apiiro, vs Archipelo, vs Arnica, vs Chainguard, vs CrowdStrike, vs Cycode, vs Cyscale, vs Data Theorem, vs Endor Labs, vs Fidelis, vs Finite State, vs GitHub Advanced Security, vs GitLab, vs JFrog, vs Legit Security, vs Minimus, vs Modelyo, vs Neo, vs Oligo, vs Orca Security, vs OX Security, vs Palo Alto Networks, vs Phoenix Security, vs Plerion, vs Pluto Security, vs Prime Security, vs Qualys, vs RAD Security, vs RapidFort, vs Raven.io, vs Red Hat, vs SentinelOne, vs Skyhigh Security, vs Snyk, vs Socket, vs Sonatype, vs Sweet Security, vs Sysdig, vs Tenable, vs Trail of Bits, vs Trend Micro, vs Uptycs, vs Upwind, vs Veracode, vs VMware, vs Wiz, vs Xcitium
In the vendor directory (3): Cloud-native application protection (CNAPP) vendors · primary category
Cloud workload protection vendors · category
Software supply chain security companies: who they are and how CISOs compare them · category

What the company sells

Aqua Security sells a cloud native application protection platform that secures applications from development through production, along with a Secure AI product for AI applications. Aqua Security says its platform brings together application risk, runtime visibility, threat detection, prevention and response.

Aqua Security describes the problem it addresses as follows: sensors collect and report back for a human to act on, and security teams are flooded with alerts they cannot prioritize because they lack production context. Aqua Security also says scanning only finds what is already known. Aqua Security says its platform turns runtime insight into inline enforcement, denying unauthorized actions at the point of execution.

The Aqua Security platform connects risk in code and images with live workload behavior. Aqua Security says it filters vulnerability risk based on what is actually executing in the workload, and that it applies compensating controls at runtime to stop exploitation without waiting for a patch. Aqua Security says its agent-based architecture enforces protection locally, even when environments are disconnected or air gapped.

Secure AI is the Aqua Security product for AI applications. Secure AI finds the AI models running in applications and protects them at two layers, blocking prompt injection and jailbreaks and denying supported actions such as credential theft or data exfiltration inside the workload. Secure AI also discovers AI models, providers, frameworks and versions in use across workloads, and lets security teams authorize specific AI services and models. Aqua Security says Secure AI scans repositories and CI/CD pipelines for undocumented AI use.

Secure AI is delivered without an application SDK or code rewrite. Runtime protection for the workload runs through the Aquasec Enforcer, the same component that protects containers and Kubernetes. Secure AI protects AI applications in containers and Kubernetes across public cloud, private cloud, hybrid and on premises environments, including containerized AI on IBM Z mainframes. Through a partnership with Akamai, Akamai Firewall for AI Applications adds prompt and output analysis at the edge.

Aqua Security says it protects cloud native applications and workloads across public cloud, private cloud, hybrid cloud and on-premises environments, across containers, Kubernetes and other cloud native workloads. Aqua Security describes its integrations as covering clouds, container and serverless platforms, CI/CD pipelines, registries, DevOps tools and orchestrators, through to Security, SIEM and Analytics.

Aqua Security describes itself as one of the most established Israeli cybersecurity companies.^[2][3]

Categories: Cloud-native application protection (CNAPP) (primary category)
Cloud workload protection
Software supply chain security
Compare Aqua Security with companies in the same category
Headquarters: Boston, United States^[1]
Founded: 2015^[1][5]
Ownership: Privately held^[4][5][6]
CISO on record: Not yet on our record. Send a verified source
Website: aquasec.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

Aqua Security Platform
Cloud native application protection platform for development through production.
The Aqua Security Platform connects risk in code and images with live workload behavior. Aqua Security says it brings together application risk, runtime visibility, threat detection, prevention and response.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Aqua Security's categories, then alphabetical. A list from the record, never a ranking.

On cloud-native application protection (cnapp), Aqua Security competes with Lacework, Orca Security, Plerion, RAD Security, Sysdig, Uptycs, Wiz, Cyscale, Sweet Security, Upwind and 12 more.
On cloud workload protection, Aqua Security competes with AccuKnox, Modelyo, Oligo, Raven.io, VMware, Lacework, Orca Security, Plerion, RAD Security, RapidFort and 3 more.
On software supply chain security, Aqua Security competes with RapidFort, Anchore, Archipelo, Chainguard, JFrog, Minimus, Red Hat, Socket, Apiiro, Arnica and 15 more.

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

[1]60m additional fundingAqua Security · aquasec.com · published January 3, 2024 · Tier A: the company, a regulator or a filing
[2]Aqua cloud native security platformAqua Security · aquasec.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[3]aquasec.comAqua Security · aquasec.com · undated page, accessed September 27, 2026 · Tier A: the company, a regulator or a filing
[4]Aqua security hires datto veteran as cmo eyes potential ipoAqua Security · aquasec.com · published July 27, 2021 · Tier A: the company, a regulator or a filing
[5]Aqua Cloud Native Security, Container & Serverless SecurityAqua Security · undated page, accessed October 23, 2026 · Tier A: the company, a regulator or a filing
[6]Secure AI: AI Application Security | AquasecAqua Security · undated page, accessed November 5, 2026 · Tier A: the company, a regulator or a filing
[7]Aqua Security Announces Leadership Transition as Company Enters Its Next Phase of GrowthAqua Security · published November 6, 2025 · Tier A: the company, a regulator or a filing
[8]Aqua Security Doubles Down on Runtime to Deliver Measurable Cloud Risk ReductionAqua Security · published February 12, 2026 · Tier A: the company, a regulator or a filing

Last verified September 27, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 5, 2026 from the references above.

Work for Aqua Security? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.

Security leadership

CISO Tribune has not yet recorded who holds the top security seat at Aqua Security. We add a seat only from a verified source; if you have one, send it to the desk.

Questions CISOs ask about Aqua Security

What does Aqua Security sell?: Aqua Security sells Aqua Security Platform. Aqua Security Platform: Cloud native application protection platform for development through production.
Who does Aqua Security fit?: From its own pages, Aqua Security sells mainly to organizations running cloud native applications and workloads in containers, Kubernetes, serverless functions and VMs. Aqua Security says its platform covers public cloud, private cloud, hybrid cloud and on-premises environments, including air gapped settings. Secure AI is aimed at teams running AI applications on Kubernetes and IBM Z mainframes.
How does CISO Tribune file Aqua Security?: CISO Tribune files Aqua Security under Cloud-native application protection (CNAPP), with Cloud workload protection and Software supply chain security as secondary categories.
Where is Aqua Security headquartered?: Aqua Security is headquartered in Boston, United States.
When was Aqua Security founded?: Aqua Security was founded in 2015.
Who owns Aqua Security?: Aqua Security is privately held.

Related guides

CISO Reporting Structure, the Five Models and What the Filings Show
Most security chiefs report into technology leadership (64%), the rest to business leaders. The five models, their trade-offs and what 10-K filings show.
CISO News: Tracking Every Appointment and Departure in the Top Security Seat
CISO Tribune records every CISO appointment and departure as a sourced, dated entry, not a column: 466 moves to date, each with a primary source and a confirmed-or-reported label.
CISO, CSO, VP of Security, Head of Security: What the Titles Mean and What the Record Shows
A chief information security officer (CISO) owns information security. A chief security officer (CSO) usually adds physical security and investigations.