Used by
OpenAna + Aqua Security
Container and image vulnerability results from Aqua.
Report importSecurity testing
Ana + Aqua Security
What Ana does with it.
Findings Ana pulls live or imports, de-duplicates, ranks by real exposure and turns into fixes.
- 01
Image findings mapped to Dockerfiles and base images
- 02
Base image upgrades as pull requests
- 03
Rebuild and verify
Setup
Connected in four steps.
- 1
Export or schedule
Export results from Aqua Security in its standard report format, or schedule the export.
- 2
Import
Upload to Ana or drop into the connected storage; Ana parses and normalizes every finding.
- 3
Merge
Findings are de-duplicated with your other scanners and ranked by real exposure.
- 4
Fix and prove
Ana opens fixes with regression tests and keeps closure evidence per finding.
In practice
Playbooks that use Aqua Security.
Governed
Every action, approved and logged.
Ana’s guardrails decide what it may do with Aqua Security, route sensitive actions to named approvers, and keep evidence for each decision. OpenAna is SOC 2 Type II, ISO 27001, HIPAA and GDPR compliant.
FAQ
OpenAna and Aqua Security.
No. Ana works with Aqua Security - it turns what the tool finds into verified fixes - so you keep the tool you already run.
Security testing
Also in this category.
See it connected
Ana on your Aqua Security.
Thirty minutes, your real setup, one real problem.