By consolidating multiple scanning tools into a single tool, Aqua Security claims to provide the most comprehensive vulnerability and misconfigurations scanner for cloud native applications and infrastructure.
Trivy can now scan source code, repositories, images, artifact registries, Infrastructure as Code (IaC) templates and Kubernetes environments – all available within CI/CD environments.
Newly added features include IDE plug-ins for JetBrains, VSCode and VIM; software bills of materials generation; detection of hardcoded secrets such as passwords, API keys and tokens; and the ability to scan running Kubernetes clusters.
"By integrating more cloud native scanning targets into Trivy, such as Kubernetes, we are simplifying cloud native security," said Aqua Security CTO and co-founder Amir Jerbi.
"Security professionals are overwhelmed by the number of tools they are required to use and consolidating tools where possible helps teams become more efficient. The world's most popular open source vulnerability scanner is now elevated to another level. With Trivy's enhancements, developers have less tools to learn, use, manage and maintain."
Trivy Premium, part of the Aqua Platform (Aqua's cloud native application protection platform), adds customer support, new centralised management capabilities plus a user interface to meet the scalability and management needs of larger organisations.
It also offers increased vulnerability identification accuracy, thanks to premium threat intelligence, malware scanning and the ability to scan standalone binaries.
Trivy Premium integrates with other Aqua Platform modules such as Cloud Security Posture Management and Runtime Protection.
"Trivy Premium is a gamechanger for organisations that already know and love Trivy and want to leverage the best security tools from the start to prevent attacks before they happen," said Jerbi.
A free trial of Trivy Premium is available.
In related news, Trivy was recently integrated into Docker Desktop to bring vulnerability and risk scanning into developer workflows.
