Aikido Security
All in one AppSec platform: SAST, dependency, secrets, container, cloud scanning plus runtime protection and pentests.
Best for Startups wanting one security tool
Used Aikido Security and liked it? Upvote it. One upvote per person. Upvotes come from visitors, not from us, and never change "Our ranking".
What it does
Aikido Security is an application security platform that brings code scanning, cloud monitoring, and penetration testing together into a unified system. Users connect their repositories, cloud environments, and running services to receive automated vulnerability detection, prioritized exploitable risks, and direct code fixes. The software is designed for developers, security teams, and CISOs seeking to eliminate tool sprawl and fix issues quickly.
Read more: 4 features and how people use themShow less
-
Static code analysis
Scans application source code to detect security risks and vulnerabilities before code changes are merged into production.
Use caseA developer reviews security alerts directly inside a pull request before merging changes into the main codebase.
From aikido.dev/platform/code · image from Aikido Security -
Secrets detection
Monitors codebases to identify and stop exposed credentials like certificates, passwords, and private API keys.
Use caseA developer runs checks across a repository to locate accidentally committed private keys before deployment.
From aikido.dev/platform/code · image from Aikido Security -
Cloud Security Posture Management
Provides full visibility into cloud environments to detect workload issues, service misconfigurations, and data paths across live infrastructure.
Use caseA platform security lead audits connected cloud accounts to find and resolve infrastructure misconfigurations across environments.
From aikido.dev · image from Aikido Security -
AI pentesting
Simulates attacks autonomously across active applications and APIs to demonstrate real exploitability and generate audit reports.
Use caseA product security manager runs an automated assessment on web endpoints to produce an audit ready SOC 2 compliance report.
From aikido.dev · image from Aikido Security
Written from Aikido Security's own website, checked . Each feature links to the page it comes from; images are Aikido Security's own.
Every plan
| Plan | Monthly | Billed yearly | Per | What it includes |
|---|---|---|---|---|
| Free | Free | Not listed | per account | 2 users, 10 repos |
| Basic | $300 | Not listed | per account (flat, scales by users from 10) | 10 users, 100 repos, 50 container images, unlimited AI AutoFix |
| Pro | $600 | Not listed | per account (flat, by users) | 200 repos, 100 images, 10 domains, on prem scanning |
| Advanced | $600 | Not listed | per account (flat, by users) | 500 repos, 200 images, broker, SIEM, FIPS images |
| Enterprise | Contact sales | Not listed | custom | contact sales; on prem deployment, FedRAMP Moderate |
From Aikido Security's own pricing page, checked . Prices are in US dollars per month; "billed yearly" is the monthly price when you pay for a year up front. A few figures (often the yearly price) are derived rather than printed on the page.
Before you pay
- Card needed for the trial
- No
- Export your data
- Yes
What Aikido Security says
Aikido lets you analyze, review, and export your software bill of materials anytime - in CycloneDX, SPDX, or CSV formats
Source page - HIPAA
- Yes
What Aikido Security says
An audit grade report, usable for SOC2, ISO27001, HIPAA Compliance,...
Source page - SOC 2
- Yes
What Aikido Security says
Aikido has SOC2 Type 2 & ISO27001:2022 certification. A report is available upon request.
Source page - Discounts
- Startup discount offering up to 30% off, and an annual discount offering 10% off.
- Support
- Slack, MS Teams, live chat
Only what Aikido Security's own pages state, with the quote behind each answer. Anything they don't publish is left out rather than guessed.
What the free plan includes
Developer: 2 users, 10 repos, 2 container images, 1 domain, 1 cloud account, 10 AI AutoFixes/
Questions people ask about Aikido Security
How much does Aikido Security cost?
Paid plans start at $300 a month (Basic). 5 plans are listed above, from Aikido Security's own pricing page.
Is Aikido Security free?
Yes, there is a free plan: Developer: 2 users, 10 repos, 2 container images, 1 domain, 1 cloud account, 10 AI AutoFixes/mo.
Is Aikido Security HIPAA compliant?
Yes. Source
Do I need a credit card to try Aikido Security?
No, you can start without a credit card. Source
Does Aikido Security have a student or other discount?
Startup discount offering up to 30% off, and an annual discount offering 10% off. Source
Can I also generate an SBOM?
Yes - you can export a full SBOM in CycloneDX, SPDX, or CSV format with one click. Just open the Licenses & SBOM report to see all your packages and licenses. Source
Can I try Aikido without giving access to my own code?
Yes - you can connect a real repo (read only access), or use our public demo project to explore the platform. All scans are read only and Aikido never makes changes to your code. Fixes are proposed via pull requests you review and merge. Source
Does Aikido make changes to my codebase?
We can’t & won’t, this is guaranteed by read only access. Source
What do you do with my source code?
Aikido does not store your code after an analysis. Some analyses, such as SAST and Secrets Detection, require a git clone operation. Source
Works with
- Languages
- All major languages supported
Where this came from
Plans, prices and limits were copied from Aikido Security's own pages, then checked .
- aikido.dev/pricing
- aikido.dev/
- help.aikido.dev/code-scanning/local-code-scanning
- help.aikido.dev/miscellaneous-info/aikido-broker-for-internal-applications
- help.aikido.dev/pentests/aikido-pentest
- help.aikido.dev/pentests/continuous-pentesting
- help.aikido.dev/getting-started/setting-up-your-account/aikido-neve...
- aikido.dev/code/open-source-license-risk
- aikido.dev/use-cases/application-security
How we collect prices and rank tools · Is something wrong? Correct this listing
Others that do the same job
Semgrepsemgrep.dev
Rule based static analysis with AI triage for code, supply chain and secrets scanning.
- Green flag: Free plan
- Green flag: Doesn't train on your data
- Red flag: Credits reset monthly
Snyksnyk.io
Developer security platform scanning code, open source dependencies, containers and IaC with AI assisted fixes.
- Green flag: Free plan
- Green flag: No card for trial
Shopifyshopify.com
Leading ecommerce platform with Sidekick AI that designs stores, writes product copy and edits photos.
Squarespacesquarespace.com
Design led website builder with AI site generation, built in commerce, scheduling and AI visibility tracking.
- Green flag: No card for trial
- Red flag: Credits reset monthly
Dorikdorik.com
No code AI website builder with CMS, blogging, white label client dashboard and lifetime plans.
FlutterFlowflutterflow.io
Visual low code builder for Flutter mobile, web and desktop apps with AI generation and code export.
- Green flag: Free plan
- Red flag: Free plan watermark