Aikido Security Features
Administration (9)
API / Integrations
Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.
Extensibility
Provides the ability to extend the platform to include additional features and functionalities
Reporting and Analytics
Tools to visualize and analyze data.
API / Integrations
Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.
API / Integrations
Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.
Risk Scoring
Provides risk scoring for suspicious activity, vulnerabilities, and other threats.
Secrets Management
Provides tools for managing authentication credentials such as keys and passwords.
Security Auditing
Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.
Configuration Management
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Analysis (12)
Issue Tracking
Track issues and manage resolutions.
Reconnaissance
Gathers information about the system and potential exploits to be tested.
Vulnerability Scan
Scans applications and networks for known vulnerabilities, holes and exploits.
Reporting and Analytics
Tools to visualize and analyze data.
Issue Tracking
Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Static Code Analysis
Examines application source code for security flaws without executing it.
Code Analysis
Scans application source code for security flaws without executing it.
Reporting and Analytics
Tools to visualize and analyze data.
Issue Tracking
Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
Static Code Analysis
Examines application source code for security flaws without executing it.
Vulnerability Scan
Scans applications and networks for known vulnerabilities, holes and exploits.
Code Analysis
Scans application source code for security flaws without executing it.
Testing (14)
Command-Line Tools
Allows users to access a terminal host system and input command sequences.
Manual Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Test Automation
Runs pre-scripted security tests without requiring manual work.
Performance and Reliability
Software is consistently available (uptime) and allows users to complete tasks quickly because they are not waiting for the software to respond to an action they took.
Command-Line Tools
Allows users to access a terminal host system and input command sequences.
Manual Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Test Automation
Runs pre-scripted security tests without requiring manual work.
Compliance Testing
Allows users to test applications for specific compliance requirements.
Black-Box Scanning
Scans functional applications externally for vulnerabilities like SQL injection or XSS.
False Positives
The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Manual Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Compliance Testing
Allows users to test applications for specific compliance requirements.
Black-Box Scanning
Scans functional applications externally for vulnerabilities like SQL injection or XSS.
False Positives
The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Monitoring (1)
Continuous Image Assurance
Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.
Protection (1)
Runtime Protection
Monitors container activities and detects threats across containers, networks, and cloud service providers.
Performance (3)
Issue Tracking
Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.
False Positives
The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.
Automated Scans
Runs pre-scripted vulnerability scans without requiring manual work.
Network (3)
Compliance Testing
Allows users to scan applications and networks for specific compliance requirements.
Perimeter Scanning
Analyzes network devices, servers and operating systems for vulnerabilities.
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Application (3)
Manual Application Testing
Allows users to perfrom hands-on live simulations and penetration tests.
Static Code Analysis
Scans application source code for security flaws without executing it.
Black Box Testing
Scans functional applications externally for vulnerabilities like SQL injection or XSS.
Functionality - Software Composition Analysis (3)
Language Support
Supports a useful and wide variety of programming languages.
Integration
Integrates seamlessly with the build environment and development tools like repositories, package managers, etc.
Transparency
Grants comprehensive user-friendly insight into all open source components.
Effectiveness - Software Composition Analysis (3)
Remediation Suggestions
Provides relevant and helpful suggestions for vulnerability remediation upon detection.
Continuous Monitoring
Monitors open source components proactively and continuously.
Thorough Detection
Comprehensively identifies all open source version updates, vulnerabilities, and compliance issues.
Documentation (3)
Feedback
Provides thorough, actionable feedback regarding security vulnerabilities, or allows collaborators to do the same.
Prioritization
Prioritizes detected vulnerabilities by potential risk, or allows collaborators to do the same.
Remediation Suggestions
Provides suggestions for remediating vulnerable code, or allows collaborators to do the same.
Security (5)
False Positives
Does not falsely indicate vulnerable code when no vulnerabilitiy legitimately exists.
Custom Compliance
Allows users to set custom code standards to meet specific compliances.
Agility
Detects vulnerabilities at a rate suitable to maintain security, or allows collaborators to do the same.
Malicious Code
Scans for malicious code
Security Risks
Tracks potential security risks
Configuration (3)
Configuration Monitoring
Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.
Unified Policy Management
Allows users to track and control security policies across cloud services and providers.
API / Integrations
Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.
Visibility (2)
Multicloud Visibility
Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.
Asset Discovery
Detect new assets as they enter a cloud environments and networks to add to asset inventory.
Vulnerability Management (3)
Vulnerability Scanning
Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.
Vulnerability Intelligence
Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.
Risk-Prioritization
Allows for vulnerability ranking by customized risk and threat priorities.
Tracking (3)
Bill of Materials
Offers a software bill of materials to keep track of components
Audit Trails
Tracks audit trails
Monitoring
Provides automated and continuous monitoring of various components
Risk management - Application Security Posture Management (ASPM) (4)
Vulnerability Management
Identifies, tracks, and remediates vulnerabilities
Risk Assessment and Prioritization
Assesses and prioritizes risks based on application context
Compliance Management
Ensures compliance with industry standards and regulations
Policy Enforcement
Ensures mechanisms are in place for enforcing security policies across applications
Integration and efficiency - Application Security Posture Management (ASPM) (2)
Integration with Development Tools
Integrates with existing development and DevOps tools
Automation and Efficiency
Automates security tasks to improve efficiency
Reporting and Analytics - Application Security Posture Management (ASPM) (3)
Trend Analysis
Includes tools for analyzing trends in security incidents and vulnerabilities over time
Risk Scoring
Assigns scores to vulnerabilities based on their potential impact, helping prioritize remediation efforts
Customizable Dashboards
Provides customizable dashboards that present real-time data on vulnerabilities, risks, and compliance status
Security - Cloud-Native Application Protection Platform (CNAPP) (4)
Workload and container security
Scans containers, workloads, and kubernetes clusters for any misconfigurations or vulnerabilities.
Threat detection and response
Monitor live environments for anomalies, risks and threats to ensure rapid response.
DevSecOps Integrations
Integrates with CI/CD pipelines to detect security risks early in the development life cycle.
Unified Visibility
Consolidate all security data across the tech and cloud stacks into one dashboard.
Artificial Intelligence - Cloud-Native Application Protection Platform (CNAPP) (3)
Intelligent remediations and suggestions
Offers an AI-powered engine to provide remediation guidance to the user based on the type of threat.
Risk prioritization
Uses context-aware analysis to identify critical and non-critical risks across vulnerabilities.
Anomaly detection using machine learning
Help detect anomalies across cloud workloads which could help present a potential breach.
Cloud Configuration Management - Cloud-Native Application Protection Platform (CNAPP) (2)
Multi-cloud visibility
Offers a unified view of all cloud assets across multi-cloud platforms such as AWS, Azure, GCP etc.
Cloud Security Posture Management (CSPM)
Continuously scans cloud environments for any misconfigurations, and provide benchmarks and guided remediation.
Agentic AI - Vulnerability Scanner (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Proactive Assistance
Anticipates needs and offers suggestions without prompting
Agentic AI - Static Application Security Testing (SAST) (1)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Agentic AI - Cloud-Native Application Protection Platform (CNAPP) (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Adaptive Learning
Improves performance based on feedback and experience
Agentic AI - Application Security Posture Management (ASPM) (2)
Autonomous Task Execution
Capability to perform complex tasks without constant human input
Multi-step Planning
Ability to break down and plan multi-step processes
Performance - AI AppSec Assistants (3)
Remediation
Automatically remediates or suggests remediation that meets internal and external code security best practices.
Real-time Vulnerability Detection
Automatically detects all security flaws in code as it's being written.
Accuracy
Does not flag false positives.
Integration - AI AppSec Assistants (3)
Stack Integration
Integrates with existing security tools to fully contextualize remediation suggestions.
Workflow Integration
Seamlessly integrates into developers' existing workflows and environments to provide code security assistance.
Codebase Contextual Awareness
Considers the entire codebase to detect existing and emerging security flaws.






