Aqua Security website screenshot

Aqua Security

Aqua Security provides cloud-native security for the full application lifecycle, protecting containers, serverless functions, and cloud workloads with vulnerability scanning, runtime protection, and compliance enforcement.

Aqua Security publishes 6 APIs on the APIs.io network, including Authentication API, Containers API, Images API, and 3 more. Tagged areas include Cloud Native, Containers, Kubernetes, Runtime Protection, and Security.

The Aqua Security catalog on APIs.io includes 1 JSON-LD context and 2 Spectral governance rulesets.

Aqua Security’s developer surface includes authentication, developer portal, documentation, engineering blog, pricing, signup flow, support, and 22 more developer resources.

60.2/100 strong ▼ -6.5 Agent 55/100 agent ready Full breakdown ↓
scored 2026-07-28 · rubric v0.6
AccessEnterpriseSelf serve
8 APIs 1 MCP Servers 8 Features 6 Use Cases
Cloud NativeContainersKubernetesRuntime ProtectionSecurityVulnerability Scanning

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-07-28 · rubric v0.6
Composite quality — 60.2/100 · strong
Contract Quality 16.3 / 25
Developer Ergonomics 9.6 / 20
Commercial Clarity 12.1 / 20
Operational Transparency 7.5 / 13
Governance 8.3 / 12
Discoverability 6.5 / 10
Agent readiness — 55/100 · agent ready
Machine-Readable Contract 18 / 18
Agentic Access Contract 10 / 10
MCP Server 12 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 7 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/aqua-security: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 8

Individual APIs this provider publishes, each with its own machine-readable definition.

Trivy

Trivy is a comprehensive open source security scanner for containers, Kubernetes, code repositories, clouds, and more — finding vulnerabilities, misconfigurations, secrets, and ...

Tracee

Tracee is a runtime security and forensics tool for Linux that uses eBPF technology to trace system events and detect suspicious behavioral patterns.

Aqua Security Authentication API

User authentication and token management

Aqua Security Containers API

Running container monitoring and enforcement

Aqua Security Images API

Container image scanning and vulnerability management

Aqua Security Policies API

Security policy management

Aqua Security Registries API

Container registry configuration

Aqua Security Users API

User and role management

Scroll for all 8

Postman Collections 6

Ready-to-run Postman collections for exercising this provider's APIs.

Arazzo Workflows 8

Multi-step API workflows described with the Arazzo specification.

Aqua Security Create Assurance Policy

Authenticate, create an image assurance security policy, then list policies to confirm it was registered.

ARAZZO

Aqua Security Image Compliance Gate

Authenticate, poll an image scan to completion, then branch on whether critical or high vulnerabilities were found to pass or fail a compliance gate.

ARAZZO

Aqua Security Image Vulnerability Lookup

Authenticate, list registered images filtered by registry and repository, then fetch full vulnerability detail for the first match.

ARAZZO

Aqua Security Onboard Registry Image

Authenticate, confirm the target registry is configured, register an image from it, then poll the scan to completion.

ARAZZO

Aqua Security Registry Inventory

Authenticate, list configured registries, then enumerate the images registered under the first connected registry.

ARAZZO

Aqua Security Rescan And Cleanup

Authenticate, re-register an image to trigger a fresh scan, poll until it completes, then delete the image when its scan failed.

ARAZZO

Aqua Security Running Container Inventory

Authenticate, list running containers monitored by the enforcer, then read the image detail behind the first running container.

ARAZZO

Aqua Security Scan Image On Demand

Authenticate, register a container image for scanning, then poll until the scan completes and read its vulnerability counts.

ARAZZO

Scroll for all 8

MCP Servers 1

Model Context Protocol servers that expose these APIs to AI agents.

MCP Server

MCP SERVER

Pricing Plans 1

Published pricing tiers and plan structures.

Rate Limits 1

Documented rate limits and quota policies.

Aqua Security Rate Limits

1 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Features 8

Notable capabilities this provider offers.

Vulnerability Scanning

Comprehensive scanning of container images, VM workloads, and serverless functions for known CVEs and misconfigurations.

Runtime Protection

Real-time protection of running containers and cloud workloads using behavioral analysis and policy enforcement.

CSPM

Cloud Security Posture Management to identify and remediate misconfigurations across AWS, Azure, and GCP.

Supply Chain Security

Protect the software supply chain by scanning code, open source dependencies, and CI/CD pipelines.

Kubernetes Security

Native Kubernetes security including admission control, runtime policies, and compliance benchmarks.

Compliance Enforcement

Automated compliance checks against CIS, PCI-DSS, HIPAA, NIST, and other regulatory frameworks.

Secrets Detection

Detect and prevent secrets and credentials from being embedded in container images and code repositories.

Network Policy

Visualize and enforce container network connectivity and micro-segmentation policies.

Scroll for all 8

Semantic Vocabularies 1

JSON-LD contexts and semantic vocabularies used across these APIs.

Aqua Security Api Context

20 classes · 28 properties

JSON-LD

Spectral Rules 2

Spectral governance rulesets for linting and validating these APIs.

Aqua Security API Rules

5 rules · 4 warnings 1 info

SPECTRAL

Aqua Security API Rules

36 rules · 12 errors 21 warnings 3 info

SPECTRAL

JSON Schema 17

Standalone JSON Schema definitions for this provider's data models.

ContainerList

2 properties

JSON SCHEMA

Container

6 properties

JSON SCHEMA

ErrorResponse

2 properties

JSON SCHEMA

ImageDetail

11 properties

JSON SCHEMA

ImageList

2 properties

JSON SCHEMA

ImageRequest

2 properties

JSON SCHEMA

Image

7 properties

JSON SCHEMA

LoginRequest

2 properties

JSON SCHEMA

LoginResponse

1 properties

JSON SCHEMA

PolicyList

2 properties

JSON SCHEMA

PolicyRequest

4 properties

JSON SCHEMA

Policy

4 properties

JSON SCHEMA

RegistryList

2 properties

JSON SCHEMA

Registry

5 properties

JSON SCHEMA

UserList

2 properties

JSON SCHEMA

User

4 properties

JSON SCHEMA

VulnerabilityCounts

5 properties

JSON SCHEMA

Scroll for all 17

JSON Structure 17

JSON Structure definitions describing this provider's data shapes.

Aqua Security Api Container List Structure

2 properties

JSON STRUCTURE

Aqua Security Api Container Structure

6 properties

JSON STRUCTURE

Aqua Security Api Error Response Structure

2 properties

JSON STRUCTURE

Aqua Security Api Image Detail Structure

11 properties

JSON STRUCTURE

Aqua Security Api Image List Structure

2 properties

JSON STRUCTURE

Aqua Security Api Image Request Structure

2 properties

JSON STRUCTURE

Aqua Security Api Image Structure

7 properties

JSON STRUCTURE

Aqua Security Api Login Request Structure

2 properties

JSON STRUCTURE

Aqua Security Api Login Response Structure

1 properties

JSON STRUCTURE

Aqua Security Api Policy List Structure

2 properties

JSON STRUCTURE

Aqua Security Api Policy Request Structure

4 properties

JSON STRUCTURE

Aqua Security Api Policy Structure

4 properties

JSON STRUCTURE

Aqua Security Api Registry List Structure

2 properties

JSON STRUCTURE

Aqua Security Api Registry Structure

5 properties

JSON STRUCTURE

Aqua Security Api User List Structure

2 properties

JSON STRUCTURE

Aqua Security Api User Structure

4 properties

JSON STRUCTURE

Scroll for all 17

Examples 17

Example request and response payloads for these APIs.

Scroll for all 17

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Aqua Security Authentication

http · 1 scheme

SECURITY

Aqua Security Domain Security

TLSv1.3 · HSTS · DMARC

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Aqua Security Agentic Access

10 operations · 4 acting

10 operations · 4 acting

AGENTIC

Use Cases 6

What developers build with this provider.

Container Security

Secure Docker and OCI containers throughout the build-to-runtime lifecycle.

Kubernetes Security

Enforce security policies, runtime protection, and compliance for Kubernetes clusters.

Serverless Security

Protect AWS Lambda, Azure Functions, and Google Cloud Functions from vulnerabilities and runtime attacks.

DevSecOps

Integrate security scanning into CI/CD pipelines to shift security left and prevent vulnerabilities from reaching production.

Cloud Workload Protection

Protect VMs and cloud workloads across multi-cloud environments from threats and misconfigurations.

SBOM Generation

Generate Software Bill of Materials (SBOM) for container images and code repositories to understand component risk.

Integrations 10

Pre-built integrations with other platforms and tools.

AWS

Native integrations with AWS ECS, EKS, Lambda, ECR, Security Hub, and other AWS services.

Azure

Integrations with Azure Kubernetes Service, Azure Container Registry, and Azure Security Center.

Google Cloud

Support for GKE, Google Container Registry, and Cloud Run on Google Cloud Platform.

GitHub Actions

Trivy GitHub Action for automated vulnerability scanning in CI/CD workflows.

Jenkins

Jenkins plugin for container image scanning and policy enforcement in pipelines.

Terraform

Terraform provider for declarative management of Aqua Security platform configuration.

Helm

Official Helm charts for deploying Aqua Security components on Kubernetes.

Splunk

Integration with Splunk for centralized security event logging and SIEM.

PagerDuty

Alert routing to PagerDuty for runtime security event notifications.

Slack

Security alert notifications delivered to Slack channels.

Scroll for all 10

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 1

Reference material describing how the API behaves

Agent Surfaces 2

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 11

Pagination, idempotency, versioning, errors, and events

Scroll for all 11

Build 2

SDKs, sample code, and the tooling you integrate with

Access & Security 3

Authentication, authorization, and security posture

Operate 3

Status, limits, changes, and where to get help

Commercial 3

Pricing, plans, and the legal terms of use

Company 2

The organization behind the API

Source (apis.yml)

apis.yml Raw ↑
aid: aqua-security
name: Aqua Security
description: Aqua Security provides cloud-native security for the full application lifecycle, protecting containers, serverless
  functions, and cloud workloads with vulnerability scanning, runtime protection, and compliance enforcement.
type: Index
accessModel:
  pricing: enterprise
  onboarding: self-serve
  trial: false
  try_now: false
  public: false
  label: Enterprise · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/aqua-security.png
tags:
- Cloud Native
- Containers
- Kubernetes
- Runtime Protection
- Security
- Vulnerability Scanning
url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/apis.yml
created: '2026-03-26'
modified: '2026-05-19'
specificationVersion: '0.19'
apis:
- aid: aqua-security:trivy
  name: Trivy
  description: Trivy is a comprehensive open source security scanner for containers, Kubernetes, code repositories, clouds,
    and more — finding vulnerabilities, misconfigurations, secrets, and SBOMs.
  humanURL: https://trivy.dev/
  tags:
  - Container Scanning
  - Open Source
  - Vulnerability Scanner
  - SBOM
  - Kubernetes Security
  properties:
  - type: Documentation
    url: https://aquasecurity.github.io/trivy/
  - type: GettingStarted
    url: https://aquasecurity.github.io/trivy/latest/getting-started/installation/
  - type: GitHubRepository
    url: https://github.com/aquasecurity/trivy
- aid: aqua-security:tracee
  name: Tracee
  description: Tracee is a runtime security and forensics tool for Linux that uses eBPF technology to trace system events
    and detect suspicious behavioral patterns.
  humanURL: https://aquasecurity.github.io/tracee/
  tags:
  - eBPF
  - Runtime Security
  - Linux Security
  - Forensics
  - Open Source
  properties:
  - type: Documentation
    url: https://aquasecurity.github.io/tracee/
  - type: GitHubRepository
    url: https://github.com/aquasecurity/tracee
- aid: aqua-security:aqua-security-authentication-api
  name: Aqua Security Authentication API
  description: User authentication and token management
  humanURL: https://www.aquasec.com/
  tags:
  - Authentication
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-authentication-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
- aid: aqua-security:aqua-security-containers-api
  name: Aqua Security Containers API
  description: Running container monitoring and enforcement
  humanURL: https://www.aquasec.com/
  tags:
  - Containers
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-containers-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
- aid: aqua-security:aqua-security-images-api
  name: Aqua Security Images API
  description: Container image scanning and vulnerability management
  humanURL: https://www.aquasec.com/
  tags:
  - Images
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-images-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
- aid: aqua-security:aqua-security-policies-api
  name: Aqua Security Policies API
  description: Security policy management
  humanURL: https://www.aquasec.com/
  tags:
  - Policies
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-policies-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
- aid: aqua-security:aqua-security-registries-api
  name: Aqua Security Registries API
  description: Container registry configuration
  humanURL: https://www.aquasec.com/
  tags:
  - Registries
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-registries-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
- aid: aqua-security:aqua-security-users-api
  name: Aqua Security Users API
  description: User and role management
  humanURL: https://www.aquasec.com/
  tags:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/aqua-security-users-api-openapi.yml
  - type: Documentation
    url: https://docs.aquasec.com/
  - type: GettingStarted
    url: https://docs.aquasec.com/docs/getting-started
  - type: APIReference
    url: https://docs.aquasec.com/reference/api-overview
  - type: Authentication
    url: https://docs.aquasec.com/reference/authentication
  - type: JSONSchema
    url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-schema/aqua-security-api-container-list-schema.json
common:
- type: PostmanWorkspace
  url: https://www.postman.com/kinlaneapi/aqua-security/overview
- type: AgenticAccess
  url: agentic-access/aqua-security-agentic-access.yml
- type: VulnerabilityDisclosure
  url: security/aqua-security-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/aqua-security-domain-security.yml
- type: Authentication
  url: authentication/aqua-security-authentication.yml
- type: Arazzo
  url: arazzo/aqua-security-create-assurance-policy-workflow.yml
  name: Aqua Security Create Assurance Policy
- type: Arazzo
  url: arazzo/aqua-security-image-compliance-gate-workflow.yml
  name: Aqua Security Image Compliance Gate
- type: Arazzo
  url: arazzo/aqua-security-image-vulnerability-lookup-workflow.yml
  name: Aqua Security Image Vulnerability Lookup
- type: Arazzo
  url: arazzo/aqua-security-onboard-registry-image-workflow.yml
  name: Aqua Security Onboard Registry Image
- type: Arazzo
  url: arazzo/aqua-security-registry-inventory-workflow.yml
  name: Aqua Security Registry Inventory
- type: Arazzo
  url: arazzo/aqua-security-rescan-and-cleanup-workflow.yml
  name: Aqua Security Rescan And Cleanup
- type: Arazzo
  url: arazzo/aqua-security-running-container-inventory-workflow.yml
  name: Aqua Security Running Container Inventory
- type: Arazzo
  url: arazzo/aqua-security-scan-image-on-demand-workflow.yml
  name: Aqua Security Scan Image On Demand
- type: LinkedIn
  url: https://www.linkedin.com/company/aquasecteam
- type: Portal
  url: https://www.aquasec.com/
- type: Documentation
  url: https://docs.aquasec.com/
- type: GitHubOrganization
  url: https://github.com/aquasecurity
- type: Blog
  url: https://www.aquasec.com/blog/
- type: Pricing
  url: https://www.aquasec.com/aqua-cloud/
- type: Signup
  url: https://www.aquasec.com/demo/
- type: Support
  url: https://support.aquasec.com/
- type: StatusPage
  url: https://status.aquasec.com/
- type: TermsOfService
  url: https://www.aquasec.com/aqua-cloud/terms-of-service/
- type: PrivacyPolicy
  url: https://www.aquasec.com/privacy-policy/
- type: ReleaseNotes
  url: https://docs.aquasec.com/docs/release-notes
- type: Features
  data:
  - name: Vulnerability Scanning
    description: Comprehensive scanning of container images, VM workloads, and serverless functions for known CVEs and misconfigurations.
  - name: Runtime Protection
    description: Real-time protection of running containers and cloud workloads using behavioral analysis and policy enforcement.
  - name: CSPM
    description: Cloud Security Posture Management to identify and remediate misconfigurations across AWS, Azure, and GCP.
  - name: Supply Chain Security
    description: Protect the software supply chain by scanning code, open source dependencies, and CI/CD pipelines.
  - name: Kubernetes Security
    description: Native Kubernetes security including admission control, runtime policies, and compliance benchmarks.
  - name: Compliance Enforcement
    description: Automated compliance checks against CIS, PCI-DSS, HIPAA, NIST, and other regulatory frameworks.
  - name: Secrets Detection
    description: Detect and prevent secrets and credentials from being embedded in container images and code repositories.
  - name: Network Policy
    description: Visualize and enforce container network connectivity and micro-segmentation policies.
- type: UseCases
  data:
  - name: Container Security
    description: Secure Docker and OCI containers throughout the build-to-runtime lifecycle.
  - name: Kubernetes Security
    description: Enforce security policies, runtime protection, and compliance for Kubernetes clusters.
  - name: Serverless Security
    description: Protect AWS Lambda, Azure Functions, and Google Cloud Functions from vulnerabilities and runtime attacks.
  - name: DevSecOps
    description: Integrate security scanning into CI/CD pipelines to shift security left and prevent vulnerabilities from
      reaching production.
  - name: Cloud Workload Protection
    description: Protect VMs and cloud workloads across multi-cloud environments from threats and misconfigurations.
  - name: SBOM Generation
    description: Generate Software Bill of Materials (SBOM) for container images and code repositories to understand component
      risk.
- type: Integrations
  data:
  - name: AWS
    description: Native integrations with AWS ECS, EKS, Lambda, ECR, Security Hub, and other AWS services.
  - name: Azure
    description: Integrations with Azure Kubernetes Service, Azure Container Registry, and Azure Security Center.
  - name: Google Cloud
    description: Support for GKE, Google Container Registry, and Cloud Run on Google Cloud Platform.
  - name: GitHub Actions
    description: Trivy GitHub Action for automated vulnerability scanning in CI/CD workflows.
  - name: Jenkins
    description: Jenkins plugin for container image scanning and policy enforcement in pipelines.
  - name: Terraform
    description: Terraform provider for declarative management of Aqua Security platform configuration.
  - name: Helm
    description: Official Helm charts for deploying Aqua Security components on Kubernetes.
  - name: Splunk
    description: Integration with Splunk for centralized security event logging and SIEM.
  - name: PagerDuty
    description: Alert routing to PagerDuty for runtime security event notifications.
  - name: Slack
    description: Security alert notifications delivered to Slack channels.
- type: SpectralRules
  url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/rules/aqua-security-spectral-rules.yml
- type: Vocabulary
  url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/vocabulary/aqua-security-vocabulary.yaml
- type: JSONLD
  url: https://raw.githubusercontent.com/api-evangelist/aqua-security/refs/heads/main/json-ld/aqua-security-api-context.jsonld
- name: MCP Server
  url: https://github.com/aquasecurity/trivy-mcp
  type: MCPServer
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com