Realurls

Aqua Security

Also known as aquasec, aquasecurity, aquasecurity/trivy, trivy. GitHub aquasecurity.

Official domains: aquasec.com

Identity anchored by github-history:aquasecurity/trivy(age=7y,contrib=546,stars=37791). Display name from github_org_display_name(self-declared).

aquasec.com verified primary · confidence 0.83 · verified 2026-09-05

1 independent anchor(s) + 2 independent corroboration(s): meets the verified threshold

EvidenceWhat it shows
A1 anchor GitHub verified this organization's domain (DNS-level check performed by GitHub)
org=aquasecurity org_verified=true blog=https://aquasec.com
 source
A8 not counted Anchored repository's homepage points here, and this site links back
repo=aquasecurity/trivy org=aquasecurity repo_anchored=true homepage=https://trivy.dev backlink=true stars=37791 age_days=2704 contributors=546
 source
A3 not counted Corporate registrar fingerprint (brand-protection registrar, long prepaid term, registry locks)
registrar=GoDaddy.com, LLC created=2009-04-22 expires=2027-04-22 remaining_days=229 locks=["delete","renew","transfer","update"]
 source
A4 not counted TLS certificate carries the organization name (OV/EV)
subject_org= validation_type=DV issuer=Google Trust Services san_count=1
 TLS handshake aquasec.com:443
B1 not counted Wikidata official-website claim (P856) on the anchored item
qid=Q111982310 label=Aqua Security Software site=https://www.aquasec.com/ sitelinks=2 competing_items=0
 source
B5 corroboration Tranco top-1M ranking
rank=72832 source=top-1m list
 source
B4 corroboration Wayback Machine history
first_snapshot=2003-04-01 history_days=8558
 source
4 piece(s) of evidence not counted — why
  • A8: repository homepage (https://trivy.dev) does not point to this domain
  • A3: registrar (GoDaddy.com, LLC) is not a brand-protection registrar
  • A4: DV certificate carries no organization name (most modern tech companies use DV; this is expected)
  • B1: entity not anchored: no canonical Wikidata item, so an arbitrary item's P856 cannot corroborate
Reproduce this yourself
# A1 — GitHub verified this org's domain
curl -s https://api.github.com/orgs/aquasecurity | jq '{name, blog, is_verified}'

# A8 — anchored repo's homepage
curl -s https://api.github.com/repos/aquasecurity/trivy | jq '{homepage, created_at, stargazers_count}'

# A3 — registrar / dates / locks
curl -sL https://rdap.org/domain/aquasec.com | jq '{status, events, registrar: [.entities[]|select(.roles[]=="registrar")|.vcardArray[1][1][3]]}'

# B5 — Tranco rank
curl -s https://tranco-list.eu/api/ranks/domain/aquasec.com

# B4 — first Wayback snapshot
curl -s "http://web.archive.org/cdx/search/cdx?url=aquasec.com&limit=1&output=json"

# Re-run the whole pipeline for this domain
git clone https://github.com/zhouchungong/realurls-registry && cd realurls-registry && pip install -e . && python -m src.verify aquasec.com

Think this is wrong? Open a dispute — the burden of proof is on us, and the record is downgraded while we check. Source record: YAML.