Overview

Aqua Cloud Security Posture Management (CSPM) provides agentless visibility into cloud infrastructure security posture across supported cloud providers.


Understanding these capabilities is essential for security and compliance teams evaluating CSPM coverage, planning cloud security workflows, and aligning Aqua CSPM with broader cloud-native security programs.


Understanding Aqua CSPM

Aqua CSPM continuously assesses cloud account configurations and workloads against security best practices and compliance frameworks. The module operates without requiring agents deployed on cloud resources, enabling broad coverage across cloud environments with minimal operational overhead.

CSPM integrates with Aqua's broader cloud-native application protection platform, providing posture management alongside vulnerability and threat detection capabilities.


CSPM Security Scoring

Aqua CSPM assigns a security score represented as a letter grade from A (lowest risk) to F (highest risk) for each monitored cloud account. The score reflects the overall security risk posture based on identified misconfigurations, policy violations, and security findings.


How scoring helps:

BenefitDescription
At-a-glance risk assessmentQuickly identify which cloud accounts require immediate attention
PrioritizationFocus remediation efforts on accounts with the lowest scores
Trend trackingMonitor posture improvement over time as issues are resolved
Stakeholder communicationProvide a simple, standardized metric for security reporting


Visualizer Reports

Visualizer reports provide graphical representations of security risks observed across your cloud environment. Rather than presenting findings as flat lists, visualizer reports map relationships between resources, misconfigurations, and risk factors to help teams understand attack paths and exposure.

Use cases:

  • Visualize how misconfigurations connect across cloud resources
  • Identify high-risk resource clusters and dependency chains
  • Communicate security posture to technical and non-technical stakeholders
  • Prioritize remediation based on visual risk context

Documentation:


Platform Coverage

Applicable To:

  • Aqua SaaS (CSPM module)
  • Supported cloud providers as documented in current Aqua CSPM release notes

Affected Components:

  • Aqua CSPM
  • Visualizer Reports
  • CSPM Security Scoring


Summary

CapabilityDescription
CSPM ScoringLetter grade (A–F) representing cloud account security risk
Visualizer ReportsGraphical display of security risks and resource relationships