Aqua Security alternatives that are actually simpler to deploy

After evaluating Aqua's container security platform, the deployment complexity became a blocker for our lean team. The agent-based architecture required significant tuning in our Kubernetes environment, particularly around network policies and daemonset resource constraints.

Looking for alternatives that prioritize simplicity without sacrificing core runtime protection. Specifically interested in solutions with:
- Minimal initial configuration
- Clear operational boundaries (e.g., no deep kernel module dependencies)
- Straightforward integration with existing CI/CD and registry setups

Open source or commercial. Primary use case is vulnerability scanning and runtime threat detection for containerized workloads on EKS.