Aikido Security is a cloud-based application security platform built for software teams. Instead of running several separate security tools, teams connect their source code repositories and let Aikido scan everything from one place.

What it scans:

Source code (SAST) for security flaws written into the code itself
Open-source dependencies (SCA), including detection of malicious packages
Leaked secrets such as API keys and passwords committed to a repository
Container images and infrastructure-as-code files like Terraform, CloudFormation and Kubernetes manifests
Running applications (DAST) for issues that only appear at runtime
Cloud configuration (CSPM) for insecure settings in cloud accounts
Licenses and SBOM so teams know what open-source rules apply to them

How it is used:

Connects to GitHub, GitLab, Bitbucket or Azure DevOps and scans on every change
Groups and de-duplicates findings so teams see fewer false alarms and can prioritise real risks
Sends alerts to chat and issue trackers such as Slack and Jira, and works inside pull requests
Offers automated fix suggestions and pull requests for many findings, so developers can resolve issues without leaving their workflow
Includes a command line tool for running scans locally or inside a CI pipeline
Offers optional human penetration testing as a separate service

The product is aimed at smaller security and engineering teams that want broad coverage without managing many tools. It runs entirely in the browser as a hosted service, with a free plan for limited use and paid plans priced per developer for larger teams and additional features.