Hi everyone! 👋 I've been lurking for a bit and finally decided to post. Our team is finally getting serious about container security, and we're looking at Aqua Security. We're a mid-sized DevOps team (about 20 of us) managing a mix of microservices on Kubernetes.
We're currently using some basic scanning in our CI pipeline, but it feels pretty limited. We keep hearing about vulnerabilities slipping into production, and it's got everyone a bit nervous. I was tasked with researching better tools, and Aqua keeps coming up.
My question is for teams of a similar size: is Aqua the best fit for image scanning? We need something that integrates smoothly into our existing GitHub Actions workflows and gives clear, actionable results without overwhelming us. We're not security experts, so a steep learning curve would be a problem.
Also, how does it handle the developer experience? We really want to catch issues early, right when a dev builds an image, but without slowing them down too much. Any insights on pricing for a team our scale would be super helpful too! I've seen the estimates online, but real-world experience is different.