Aqua Security has expanded into cloud security posture management (CSPM) with the acquisition of CloudSploit. With the addition of CloudSploit and VM Security, Aqua’s customers can effectively manage risk and protect against threats for their multi-cloud environments across the full application stack.

CloudSploit is the second open source investment by Aqua since August, when the company announced its acquisition of Trivy Vulnerability Scanner.

CloudSploit’s SaaS-based platform is said to enable customers to monitor their public cloud accounts within minutes, providing visibility to their entire estate of cloud resources, and reduce threats due to misconfiguration and vulnerabilities.

Co-founded by Matthew Fuller and Josh Rosenthal, CloudSploit continues Aqua’s investment in the open source community. The SaaS platform addresses real-world threat scenarios and configuration challenges of enterprise users who are continually monitoring their environments to ensure their adherence to best practices and compliance, the company said.

Aqua said it has also added new capabilities to its Cloud Native Security Platform (CSP), deepening protection of virtual machines.