Aqua Security launches Trivy Partner Connect to expand open source security scanning ecosystem

Program’s first members Echo and Minimus deliver secure-by-design image solutions to Trivy users

Aqua Security announced the launch of the Trivy Partner Connect Program, aimed at expanding the ecosystem around its Trivy vulnerability scanner. This program engages commercial vendors, with Echo and Minimus as the inaugural partners, both offering secure image solutions aligned with Trivy’s objectives of enhancing developer and security team capabilities.

Trivy Partner Connect provides a structured framework for partners to build, integrate, and collaborate, enriching the Trivy user experience while supporting open source development. Itay Shakury, VP of Open Source at Aqua Security, emphasized the program’s value, noting ongoing investments in security tools used by millions and ensuring partners can influence product direction.

Trivy, recognized with over 27,000 GitHub stars and 100 million annual downloads, has established itself in the open source security space. The new program fosters broader security support through additional partner-driven content and integrations while maintaining user familiarity with the tool.

Echo supplies vulnerability-free images that are FIPS-validated and compatible with existing operating systems. CEO Eilon Elhadad stated that partnering with Trivy amplifies their outreach to users and allows development teams to prioritize their goals over vulnerability management.

Minimus provides minimal container and Virtual Machine (VM) images, designed to have lower Common Vulnerabilities and Exposures (CVE) counts and specific hardening features. John Morello, CTO of Minimus, highlighted the trust Trivy enjoys and how their partnership aids in minimizing vulnerabilities early in the development process.

Trivy Partner Connect comprises three tiers: Certified, Core, and Advisor, catering to different partnership needs, including integration, engineering collaboration, and broader service contributions. The program is positioned for quick expansion, supporting ongoing outreach to organizations interested in forming alliances with Trivy.