From 775f954c3d0c8ca9baeeb0f45ffe5978a30ef313 Mon Sep 17 00:00:00 2001 From: Itay Shakury Date: Tue, 3 Dec 2024 22:24:56 +0200 Subject: [PATCH] docs: add commercial content (#8030) --- README.md | 2 +- docs/commercial/compare.md | 86 +++++++++++++++++++++++++++++++++++ docs/commercial/contact.md | 17 +++++++ docs/community/principles.md | 2 +- docs/getting-started/faq.md | 2 +- docs/getting-started/index.md | 2 +- mkdocs.yml | 7 ++- 7 files changed, 113 insertions(+), 5 deletions(-) create mode 100644 docs/commercial/compare.md create mode 100644 docs/commercial/contact.md diff --git a/README.md b/README.md index 15a53e5310db..e17400713e9b 100644 --- a/README.md +++ b/README.md @@ -107,7 +107,7 @@ trivy k8s --report summary cluster ## Want more? Check out Aqua If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering. -You can find a high level comparison table specific to Trivy users [here](https://github.com/aquasecurity/resources/blob/main/trivy-aqua.md). +You can find a high level comparison table specific to Trivy users [here](https://trivy.dev/commercial/comparison). In addition check out the website for more information about our products and services. If you'd like to contact Aqua or request a demo, please use this form: diff --git a/docs/commercial/compare.md b/docs/commercial/compare.md new file mode 100644 index 000000000000..eb16cc26812a --- /dev/null +++ b/docs/commercial/compare.md @@ -0,0 +1,86 @@ +# Aqua Security is the home of Trivy + +Trivy is proudly maintained by [Aqua Security](https://aquasec.com). +If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering. +In this page you can find a high level comparison between Trivy Open Source and Aqua's commercial product. +If you'd like to learn more or request a demo, [click here to contact us](./contact.md). + +## User experience + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Interface | CLI tool | CLI tool
Enterprise-grade web application
SaaS or on-prem | +| Search & Discover | - | Easily search for security issues across all workloads and infrastructure in your organization
Visually discover risks across your organization | +| User management | - | Multi account
Granular permissions (RBAC)
Single Sign On (SSO) | +| Support | Some skills required for setup and integration
Best effort community support | Personal onboarding by Aqua Customer Success
SLA backed professional support | +| Scalability & Availability | Single scan at a time | Centralized scanning service supports concurrent scans efficiently
Highly available production grade architecture | +| Rate limiting | Assets hosted on public free infrastructure and could be rate limited | Assets hosted on Aqua infrastructure and does not have limitations | + +## Vulnerability scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Vulnerabilities sources | Based on open source vulnerability feeds | Based on open source and commercial vulnerability feeds | +| New Vulnerabilities SLA | No SLA | Commercial level SLA | +| Package managers | Find packages in lock files | Find packages in lock files or reconstructed lock files | +| Vulnerability management | Manually ignore specific vulnerabilities by ID or property | Advanced vulnerability management solution
Vulnerability tracking and suppression
Incident lifecycle management | +| Vulnerability prioritization | Manually triage by severity | Multiple prioritization tools:
Accessibility of the affected resources
Exploitability of the vulnerability
Open Source packages health and trustworthiness score
Affected image layers | +| Reachability analysis | - | Analyze source code to eliminate vulnerabilities of unused dependencies | +| Contextual vulnerabilities | - | Reduce irrelevant vulnerabilities based on environmental factors (e.g. Spring4Shell not relevant due to JDK version) | +| Compiled binaries | Find embedded dependencies in Go and Rust binaries
Find SBOM by hash in public Sigstore | In addition, identify popular applications | + +## Container scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Windows containers | - | Support scanning windows containers | +| Scan container registries | - | Connect to any container registries and automatically scan it | +| Private registries | Standard registry authenticationCloud authentication with ECR, GCR, ACR | Supports registry specific authentication schemes | +| Layer cache | Local cache directory | Scalable Cloud cache | + +## Advanced scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Malware scanning | - | Scan container images for malware | +| Sandbox scanning | - | Use DTA (Dynamic threat analysis) to run and test container images' behavior to detect sophisticated threats | +| SAST (code scanning) | - | Analyze source code for security issues and vulnerabilities | + +## Policy and enforcement + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Kubernetes admission | - | Validating Kubernetes Admission based on automatic or user defined policy | +| CI/CD policies | Can fail the entire build on any finding | Granular policies to fail builds based on custom criteria | +| Container engine | - | Block incompliant images from running at container engine level | +| Block vulnerable packages | - | vShield – monitor and block usage of vulnerable packages | + +## Secrets scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Detected patterns | Basic patterns | Advanced patterns | +| Leaked secrets validation | - | Automatically checks if leaked secrets are valid and usable | + +## IaC/CSPM scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +| Infrastructure as Code (IaC) | Many popular languages as detailed [here](https://aquasecurity.github.io/trivy/latest/docs/scanner/misconfiguration/policy/builtin/) | In addition, Build Pipeline configuration scanning | +| Checks customization | Create custom checks with Rego | Create custom checks in no-code interface
Customize existing checks with organizational preferences | +| Cloud scanning | AWS (subset of services) | AWS, Azure, GCP, Alibaba Cloud, Oracle Cloud | +| Compliance frameworks | CIS, NSA, vendor guides | More than 25 compliance programs | +| Custom compliance | Create in YAML | Create in a web UI | +| Remediation advice | Basic | AI powered specialized remediation guides | + +## Kubernetes scanning + +| Feature | Trivy OSS | Aqua | +| --- | --- | --- | +Scan initiation | CLI / Kubernetes Operator | Kubernetes Operator / Management web application | +Results consumption | kubectl / CRD / Prometheus exporter | In addition, Advanced UI dashboards, Automatic notifications and incident management flows | +Cluster discovery | Kubeconfig | Automatic discovery thorough cloud onboarding | +Workload image scanning | Scanning in cluster, requires capacity planning | Scanning offloaded to Aqua service, little impact on scanned clusters | +| Cluster scanning | CIS, NSA, PSS | More than 25 compliance programs | +| Scope | Single cluster | Multi cluster, Cloud relationship | +| Scalability | Reports limited by in-cluster etcd storage (size and number of reports) | Cloud-based storage (unlimited scalability) | diff --git a/docs/commercial/contact.md b/docs/commercial/contact.md new file mode 100644 index 000000000000..7dbc29ef5407 --- /dev/null +++ b/docs/commercial/contact.md @@ -0,0 +1,17 @@ + + + diff --git a/docs/community/principles.md b/docs/community/principles.md index 8f369429ced5..aecb34b00ba9 100644 --- a/docs/community/principles.md +++ b/docs/community/principles.md @@ -48,6 +48,6 @@ As mentioned in [the Core Principles](#detecting-unintended-states), detection o ### User Interface Trivy primarily operates via CLI for displaying results, with a richer UI available in [the commercial version][aqua]. -[trivy-aqua]: https://github.com/aquasecurity/resources/blob/main/trivy-aqua.md +[trivy-aqua]: ../commercial/compare.md [tracee]: https://github.com/aquasecurity/tracee [aqua]: https://www.aquasec.com/ \ No newline at end of file diff --git a/docs/getting-started/faq.md b/docs/getting-started/faq.md index 3bd1e9fcb978..f31c2f89ab08 100644 --- a/docs/getting-started/faq.md +++ b/docs/getting-started/faq.md @@ -11,7 +11,7 @@ Check out the [Scanning coverage page](../docs/coverage/index.md). ### Is there a paid version of Trivy? If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering. -You can find a high level comparison table specific to Trivy users [here](https://github.com/aquasecurity/resources/blob/main/trivy-aqua.md). +You can find a high level comparison table specific to Trivy users [here](../commercial/compare.md). In addition check out the website for more information about our products and services. If you'd like to contact Aqua or request a demo, please use this form: diff --git a/docs/getting-started/index.md b/docs/getting-started/index.md index 73ddddafda48..b46ce3c340ea 100644 --- a/docs/getting-started/index.md +++ b/docs/getting-started/index.md @@ -69,6 +69,6 @@ Now that you up and ready, here are some resources to help you deepen your knowl # Want more? Check out Aqua If you liked Trivy, you will love Aqua which builds on top of Trivy to provide even more enhanced capabilities for a complete security management offering. -You can find a high level comparison table specific to Trivy users [here](https://github.com/aquasecurity/resources/blob/main/trivy-aqua.md). +You can find a high level comparison table specific to Trivy users [here](../commercial/compare.md). In addition, check out the website for more information about our products and services. If you'd like to contact Aqua or request a demo, please use this form: diff --git a/mkdocs.yml b/mkdocs.yml index 4b20bb8d6dac..ac6748d07822 100644 --- a/mkdocs.yml +++ b/mkdocs.yml @@ -221,7 +221,9 @@ nav: - Backporting: community/maintainer/backporting.md - Help Wanted: community/maintainer/help-wanted.md - Triage: community/maintainer/triage.md - + - Enterprise: + - Comparison: commercial/compare.md + - Contact Us: commercial/contact.md theme: name: material custom_dir: docs/overrides @@ -272,6 +274,9 @@ extra: link: https://github.com/aquasecurity/trivy - icon: fontawesome/brands/slack link: https://github.com/aquasecurity/trivy + analytics: + provider: google + property: G-V9LJGFH7GX plugins: - search