Quay is a hosted private container registry that stores, builds, and deploys container images. Quay also includes features for building and scanning images. It can scan Docker images for security vulnerabilities, identifying potential issues so that you can mitigate security risks. For an example, it can put a layer of indirection between the Docker image ID and the actual image storage that is specific to the repository to which it is associated.