Solid findings across the codebase. It keeps me up to date on security issues in my dependencies, and it also alerts me to attempted PR submissions.

Since I'm on the free tier, I use the active monitoring frequently when the scans take, to ensure I'm on top of issues when they're found.

Seamless integration to GitHub, makes it easy to keep the context updated.

Onboarding was super easy when getting started, and the free trial really showed what's available in the paid tiers effectively.

The AI built into the false positive analyser is solid, and easily brushes aside things that don't really matter. Much better than some other scanning tools I've used which call out every false positive, meaning I have to do more work to review. Review collected by and hosted on G2.com.

For me it's mainly just the price. Clearly it's designed as a premium product, I just don't have a premium budget. Review collected by and hosted on G2.com.

As a small startup building an AI platform for enterprise customers, Aikido Security has helped us achieve an enterprise-grade security posture without the cost and complexity of a traditional security team.

The biggest value has been the combination of automated code reviews, vulnerability detection and clear, actionable explanations. Rather than just flagging issues, Aikido explains what matters, why it matters and how to fix it, which has saved us many hours every week.

The GitHub and Lovable integrations have been particularly valuable. We can identify issues in GitHub, remediate them quickly in Lovable, and immediately verify that our changes have resolved the findings. That workflow is seamless and has become part of our normal development process.

The platform is intuitive, fast and easy to navigate, so we were productive almost immediately without needing onboarding or support. The AI-powered explanations make complex security issues understandable even for a small team without dedicated security specialists.

Overall, Aikido has given us the confidence to demonstrate a strong security posture to enterprise prospects while avoiding the significant cost of external code reviews, security audits and penetration testing. Review collected by and hosted on G2.com.

Overall, I've had a very positive experience with Aikido Security, so my feedback is more about refinement than major issues.

The biggest improvement I'd like to see is clearer guidance around the pricing model for individual security tests. As a new customer, we consumed more credits than expected before we understood the most efficient way to use the platform. Better visibility into expected credit usage, together with recommendations on when to run different types of scans, would help new users maximise value.

I'd also like to see more prioritisation for small development teams. While the findings are generally well explained, it would be helpful if Aikido provided more guidance on which issues should be addressed first based on security risk, business impact and development effort. That would make planning remediation even easier for startups with limited resources.

Finally, although the AI explanations are already very good, I'd welcome even more context around remediation options and the trade-offs between different approaches, particularly for teams that don't have dedicated security specialists. Review collected by and hosted on G2.com.

Aikido has been fantastic for developing my platform, running automated scans and having that extra bit of piece of mind is invaluable. It integrates perfectly with Claude code for quick scans and the VM scanner has proven massively useful. It’s’ got a super clean and easy to use UI which does a great job of not standing in the way of what’s important. Review collected by and hosted on G2.com.

The local dev device protection was a little too intrusive for my liking and didn’t give the option to override the blocker when installing software that was ‘too new’. I’m sure this is being worked on however. Review collected by and hosted on G2.com.

The daily report is the only security email I actually look forward to opening.

When something shows up, it comes with enough context and remediation guidance that fixing it is the obvious next step.

That structure matters a lot to us because we're a two-person tech department, so we wired Aikido findings directly into our agentic dispatch platform as a first-class event source (via webhooks) so a finding fires, gets policy-gated, and an agent investigates and opens a fix-PR before a human ever touches it.

This is only possible because Aikido's output is clean and actionable enough for a machine to act on. Static analysis, dependency scanning, and secrets detection consolidated in one place, low noise, high trust in what it surfaces.

Onboarding was the fastest I've experienced in security tooling. I connected three medium-sized repositories and was getting real findings within the hour, no agents to install, no pipeline surgery, no week of configuration before you see value. It just started working.

The pricing is honest. The free plan is generous enough that a small team gets genuine coverage across static analysis, dependency scanning, secrets without paying a dime, which means the ROI conversation answers itself.

The AI features are the part that surprised me. Most scanners tell you what's wrong and leave the fix as an exercise for the reader. Aikido's intelligence gives you actual remediation advice how to fix the finding, not just the CVE link which turns triage from a research project into an actionable task.

And the UI stays out of your way. It's friendly, fast, and not drowning in security jargon. Everything is click, click, done. Review collected by and hosted on G2.com.

Honestly, nothing about the product itself.

My only friction is pricing structure: the jump from the free tier to ~$700/mo is steep for a small shop. The free plan is genuinely generous and the paid tier is worth it, but a middle-ground tier for teams that have outgrown free without needing the full package would make the decision easier. That's a packaging gripe, not a product one. Review collected by and hosted on G2.com.

As an MSSP managing multiple clients and software houses, what we love most about Aikido is its capability to act as a single pane of glass. Instead of forcing us to jump between dozens of separate tools for every single client, Aikido centralizes everything. It drastically cuts down on the noise and false positives, meaning our team and our clients' developers only focus on vulnerabilities that actually matter. The multi-tenant posture makes managing diverse codebases incredibly efficient Review collected by and hosted on G2.com.

Nothing in particular.

Everything works as intended. Review collected by and hosted on G2.com.

The AI code review catches things I'd miss as a solo developer — dependency vulnerabilities, AWS misconfigurations, and outdated packages across multiple repos. As a bootstrapped founder managing several Laravel applications, having automated scanning in the background means I'm not relying on my own eyes for everything. The deeper AI reviews have been especially useful for catching logic-level issues, not just dependency problems. Review collected by and hosted on G2.com.

Honestly my only real complaint has ever been the pricing structure, which seems to favor larger teams. As a solo dev, a tier built more around independent developers would be nice — but to be fair, that's not unique to Aikido at all. Plenty of SaaS companies price the same way (Intercom, HubSpot, Datadog, and most security tooling all skew toward bigger teams), so it's an understandable tradeoff and never enough to outweigh what I get out of it. Review collected by and hosted on G2.com.

It picks up invalid or unlicensed NuGet packages and notifies me about them, while also automatically checking for and excluding false positives. Wide range of tests are invaluable for securing our code base and picking up simple logical bugs. The user interface groups the results neatly and helps me focus on issues based on criticality. The integration with DevOps is simple and sufficient. The ability of running AI-backed pen-tests is something that I would like to investigate in the future. Review collected by and hosted on G2.com.

Nothing, really—the free tier already provides an amazing overview, which helps a lot in these financially difficult times. Review collected by and hosted on G2.com.

Aikido was easy to connect and quickly gave me a consolidated view of vulnerabilities across my codebase and dependencies. The findings are presented clearly, with useful remediation guidance, which is particularly valuable for a small team without a dedicated application security function. Review collected by and hosted on G2.com.

As with any automated security platform, some findings still require manual review and prioritisation to understand their actual relevance to the application. Review collected by and hosted on G2.com.

Easy to onboard and configure with an intuitive interface. The alerts for the vulnerability and app code is helpful, and the findings are accurate. The ability to integrate with GitHub is perfect for us. Review collected by and hosted on G2.com.

I have not seen much value from the AI side of things. I have an AI review agent running for my code and it seems to do more than Aikido (because it knows my codebases very well), so I would be interested to know how Aikido plans to grow the usage of AI and train it to find helpful insights and know the ins and outs of the codebase. Review collected by and hosted on G2.com.

The UI is really nice and the layout of the feed with plenty of nice filters to deep dive into certain categories of vulnerabilities It is the free plan for my organisation so well worth what it gives in comparison to free tiers elsewhere It is the free plan for my organisation so well worth what it gives in comparison to free tiers elsewhere Review collected by and hosted on G2.com.

Having to wait a few days for the next scan to run but this is on the free plan Review collected by and hosted on G2.com.