Aikido Release Notes

Features

• Aikido, now in 6 languages - Spanish, Portuguese, Japanese, French, Turkish and German are live across the platform, so every team can work with security in their own language.
• Terraform Provider - Manage repositories, AutoFix, PR checks, teams, and permissions as code, and roll out Aikido at scale without clicking through the UI.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #274 new vulnerabilities over the last two weeks!
We introduced Aikido Altar, our first open-weight security model, which powers air-gapped, on-prem pentesting with Aikido Machine so your code never leaves your infrastructure.
We also joined OpenJS's Security Stewardship Program as an inaugural partner, funding bug bounties and maintainer support for Node.js.

Improvements

• General - Automated monthly credit top-ups
• Code Quality
  • Code-coverage now available on GitLab, BitBucket, Azure DevOps and custom integrations
  • Auto-close resolved code quality tickets
• Pentest - Retest with additional context
• Device Protection - Add archived device status
• Zen Firewall - Agent releases for Dotnet, Python, PHP, Golang and Node
• IDE - New releases for VSCode and Jetbrains
  • VSCode - Secrets scanning now uses BetterLeaks
  • Jetbrains - Multi project scanning support added
• MCP - New releases
  • Added Devin MCP integration
  • Ignore, unignore, snooze and unsnooze tools added
• Aikido Intel - Now included in PR reviews
• API - Get PR check detail
• API - Get Package health
• API - Remove a device from device protection
• API - Map teams to projects
• API - Get or update container AutoFix settings
• API - List Zen user ips
• API - Get EOL base data

Last updated 2 days ago

Code Coverage brings test coverage into Aikido Code Quality, free on every paid plan. Set up the integration in 1 simple step, run your test suite in CI, and see exactly where you’re lacking coverage per repository, per file, and per line, together with the code quality findings for the same code.

What it does

• Lists every repo. Each row shows overall coverage and when it last updated, so the under-tested repos stand out.
• Goes down to the line. Open a file to see line by line what your tests went through and what they never touched.
• Tracks coverage over time. Each upload shows in the trend graph, so you can see the coverage evolution as you add tests or remove dead code.
• Reuses your existing SCM integration. Add one upload step to your CI and results show up in Aikido, with nothing to host and no token to manage.
• Gives you two ways to browse. The ‘Code Tree’ tab follows your directory structure, while the ‘File List’ tab shows every file, ranked by coverage percentage.

What you can use it for

• Deciding where to invest in testing. Hotspots with no coverage usually deserve attention before files that already have plenty.
• Checking a file before you touch it. See what your tests already cover in the code you're about to change.
• Pairing coverage with security findings. When a repository scan or PR check flags a file, check whether it has any tests running.

How it fits into Aikido

• Lives under Code Quality > Code Coverage, next to repositories and PR checks.
• Native integrations for GitHub, GitLab, Bitbucket, and Azure DevOps. Other CI like CircleCI and Jenkins upload through a custom integration.
• Accepts LCOV and Cobertura reports. Jest and pytest-cov write LCOV natively, and other runners work if they can export either format.
• Keeps your source code out of the upload. The report only records which files and lines your tests covered, tied to the commit and branch it came from.

Code Coverage is set up per repository. Add the upload step for your CI after your test step, point it at your coverage report, and the next pipeline run will populate the ‘Code Coverage’ tab in Aikido. The docs have the setup for each platform, including the GitHub Action and the GitLab CI component. If coverage is split across services, pass every file and Aikido merges them for you.

Coverage shows in the dashboard, and on GitHub it can gate your PRs today: a pull request that drops coverage below your threshold won't merge. Other platforms are coming soon.

How much does it cost?

Code Coverage is included on every paid plan, Basic through Enterprise, with no per-line-of-code metering. It isn't available on the free forever Developer plan.

→ Read more about Code Coverage

Features

• Cloud Inventory - See every cloud resource laid out by region and VPC, with exposure findings and firewall rules one click away. No more hopping between hundreds of console screens to know what's running and what's exposed.
• Creating fix PRs with Deep Review - Reply to a Deep Review comment asking for a fix, and Aikido opens a new pull request with the fix, built on your current PR.
• Code Coverage on GitLab - Upload coverage from GitLab CI and see per-file, per-line results in Aikido, alongside GitHub.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #501 new vulnerabilities over the last two weeks!

Aikido launched Altar, its first open-weight security model, built to run frontier-grade pentesting fully on-prem and air-gapped without sending sensitive data to a third party.

Aikido researchers also found a second camouflaged RCE in MECCHA CHAMELEON, where a malicious custom map could write an executable to a user's startup folder.

Improvements

• Device Protection
  • Automatic bypass of min package age for packages with critical CVE’s and free of malware
  • New ecosystems: Firefox and Homebrew
• Pentest
  • Access for team only users which retesting issues
  • Added Sensitive Data information to DSPM
  • New Infrastructure focussed checks added
• Code Quality - Create Task Trackers issues for quality findings
• Container scanning - Reachability now includes BigQuery datasets
• Cloud - VM Reachability now available for GCP
• MCP - New tools:
  • Get issue details including pentest information, deep review, and other
  • SCA scanning tool
• Custom reports - Support grouped bar charts
• Zen Firewall - Agent releases for Java, PHP, Golang, and Node
  • Added Alpine support for PHP
• IDE - New release for Jetbrains: Added support for multi repository scanning
• API - List user logins history
• API - Broker management
• API - Webhook when new issue ignore/snooze request accepted or denied
• API - Webhook for Domain scan finished

Features

• Code Coverage for GitHub - Find out which parts of your code ship with zero tests behind them. One-step setup, no secrets to manage, instant visibility.
• SIEM Integrations - Send your Aikido issues to any of 11 supported SIEMs. Correlate security findings with everything else within your organization.
• Pentest for AI capabilities - Shipped an agent or an LLM feature? Launch a pentest targeted on AI capabilities to focus on the OWASP Agentic Top 10 coverage, from prompt injection to memory poisoning.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #451 new vulnerabilities over the last two weeks!

Some good news for once: TeamPCP is in handcuffs. Two men in their early 20s. And we pulled the numbers on what all those npm worms actually did for security, which is more than any advisory managed.

Improvements

• Device Protection - New Firewall to block malicious domains
• Custom Reports - New datasources
  • Deep review
  • Repo Configuration issues (lockfiles missing etc)
  • Users with roles and permissions
• Deep Review
  • Added monthly billing limits
  • Talk to Deep Review on Gitlab
• Package Health - New ecosystem Jetbrains
• IDE - New releases for VSCode and Jetbrains
• Aikido Terraform provider
  • new resource to manage default PR checks
  • new resource to manage PR check settings
• API - Manage defaults PR checks for new repos
• API - Report export for PCI and DORA compliance
• API - Listing & handling inbox requests

Last updated 1 minute ago

Deep Review is Aikido's agentic reviewer for pull requests. It reasons across your full codebase and the discussion already happening on the PR, then posts findings and suggested fixes directly on the pull request, the way a senior security engineer would if they had time to read every change.

What it does

• Reviews with full context. Sees what you've discussed or flagged on the PR, plus what your other checks already flagged, not just the diff.
• Reasons across repos. It traces logic across files, including middleware and global config, and pulls in the linked repositories a change depends on.
• Posts fixes, not just comments. Findings land on the PR with a suggested fix attached.
• Saves feedback to memory. Mark a finding as an accepted risk or a false positive, and Deep Review will remember that and learn from it.
• Closes its own findings. When you push a fix, Deep Review confirms it actually resolves the issue, then resolves the comment for you.

What it catches

Deep Review flags issues that come from how a change interacts with the rest of your app, the type that usually surfaces in a pentest or in production:

• Deeply nested security issues
• Broken access control
• Business logic flaws
• Cross-tenant data leaks

Security is just part of it. Deep Review also flags bugs, unintended side effects, and suggests concrete improvements on every pull request.

How it fits into Aikido

• Runs after your other PR checks (like SAST and dependency checks) so it can build on their findings instead of repeating them.
• Shifts deep security review left in your development workflow, catching before merge what a pentest would only find later. It’s the continuous complement to your one-off Code Security Audit.

Deep Review is enabled per repository so it reasons across your whole codebase, and you can set the review level that fits your team.

How much does it cost?

Deep Review runs on credits from your Aikido Wallet: 1 credit ($1) per PR, with unlimited re-reviews on the same PR. This makes it 5-10x more accessible than the same review done in-house or with competitors. Get an estimate for how much it'll cost across your repos, and set a monthly cap to keep spend predictable.

→ Read more about Deep Review

Features

• Device Protection for Linux - block malware at install time on Linux desktops and servers, now in beta. Ships as .deb and .rpm
• GCP VM Scanning - Google Cloud VMs are now live for everyone. Agentless set-up, no SSH keys or agents. AWS, Azure and GCP all covered.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #371 new vulnerabilities over the last two weeks!

We burned 11.7bn tokens for you, just to find the best cyber AI model. We gave 10 models 32 fresh CVEs to rediscover, three passes each, and open weights just beat the public frontier.

But Aikido still does it better: we put Code Security Audit head to head with Claude Security on Mythos. 68 of 89 vulns found vs 60, at $75 vs $157. The harness beats the model.

Improvements

• General - Request to ignore issue on PR/MR with admin approval
• General - Ignore license issues by path
• CVE Exploitability - Support for containers
• Reports - OSCAL FedRAMP DAST report
• Package Health - Support for Nuget and Jetbrains
• Zen Firewall - Agent releases for Dotnet, Java, PHP, Ruby, Golang and Node
• IDE - New release for VSCode
• API - Bulk update Github PR configuration
• API - Request a hardened container image
• API - List full repository code quality findings

Last updated 7 days ago

Features

• Deep Review - Agentic PR review that goes beyond the diff, diving into the surrounding code and linked repositories to catch business logic mistakes, cross-service security issues and more
• Android Pentest - Aikido Pentest now covers native and hybrid Android apps, including those with biometric login
• Custom Reports - Describe the report you want in plain language, Aikido Agent builds it from your findings, and you share it with your workspace in a click

Free Credits!

Need credits for Deep Review, Security Audit? Pro and Advanced plans now get 100–200 free Aikido Credits every month! Keep using them and they keep coming.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #510 new vulnerabilities over the last two weeks!

Shai-Hulud: Part Three, a compromised keyv maintainer account seeded a self-replicating worm that hit 444+ npm packages and 2 billion monthly installs. Aikido pulled it apart, payload and IOCs included.

Improvements

• Reports - Custom Reports
• Package Health - Added support for PyPI and Nuget
• Cloud - Kubernetes team annotations are now surfaced as container labels
• Cloud - Kubernetes agents now have FIPS variants
• Integrations - Aikido Terraform provider
• Integrations - Gitlab now supports resolving of issues
• Integrations - Bypass PR checks per repository in Training mode
• Reports - Repository filter for trends over time
• Zen Firewall - Agent releases for PHP, and Ruby
• IDE - New releases for VSCode, and Visual Studio
• API - Read and update AutoFix settings

Last updated 1 day ago

Aikido's Data Exposure Audit is a code-based DSPM. It helps developers and AppSec teams find sensitive data exposure risks by analyzing application code and related files already connected to Aikido. It uses LLM agents to read your code, mapping out how sensitive data is created, moved, stored, and exposed. It tells developers which code paths create risky data exposure without accessing your production data.

What it does

• Finds sensitive data exposure before production. Identify risky data handling in code before sensitive data lands somewhere it shouldn’t.
• Maps sensitive data flows. Follows sensitive fields from sources like request bodies, uploads, DB reads, config, and application logic into sinks like logs, third party APIs, LLM prompts, caches, queues, and storage.
• Helps identify access risk. Shows where routes, roles, services, and tenant checks appear to control access to sensitive data.
• Finds exposures traditional storage analysis can miss. Unsafe logging, broad API responses, PII in vendor payloads, secrets in frontend bundles, and sensitive data sent to AI systems.

What it looks for

• Credentials in URLs. Tokens and API keys in query strings, redirects, and clone URLs, where logs, proxies, and browser history pick them up.
• API over-exposure. Endpoints returning more fields than the caller is entitled to, and missing tenant ownership checks on data access.
• Unsafe logging and exports. Unredacted PII and secrets in application logs, traces, caches, and dumps.
• Over-broad third-party and AI sharing. Customer data and secrets sent to vendors, analytics, LLM prompts, and vector stores beyond what's required.
• Weak storage. Regulated data stored unencrypted, or with base64, MD5, and SHA-1 standing in for encryption.
• Incomplete deletion. Delete flows that leave downstream records, caches, and related stores intact.

Plus shadow copies in staging and snapshots, over-permissioned IAM roles and OAuth scopes, and unauthenticated data stores.

From finding to fix

• Every finding includes code evidence, a data flow explanation, the exposure risk, and remediation guidance.
• AutoFix opens a fix PR where the remediation is code-level.
• Re-test any finding to confirm the issue is resolved.
• Runs against the repos you've already connected. No new data source to onboard.

Each Data Exposure Audit uses credits from your Aikido Wallet.

→ Read more about code-based DSPM

Aikido's Data Exposure Audit is a code-based DSPM. It helps developers and AppSec teams find sensitive data exposure risks by analyzing application code and related files already connected to Aikido. It uses LLM agents to read your code, mapping out how sensitive data is created, moved, stored, and exposed. It tells developers which code paths create risky data exposure without accessing your production data.

What it does

• Finds sensitive data exposure before production. Identify risky data handling in code before sensitive data lands somewhere it shouldn’t.
• Maps sensitive data flows. Follows sensitive fields from sources like request bodies, uploads, DB reads, config, and application logic into sinks like logs, third party APIs, LLM prompts, caches, queues, and storage.
• Helps identify access risk. Shows where routes, roles, services, and tenant checks appear to control access to sensitive data.
• Finds exposures traditional storage analysis can miss. Unsafe logging, broad API responses, PII in vendor payloads, secrets in frontend bundles, and sensitive data sent to AI systems.

What it looks for

• Credentials in URLs. Tokens and API keys in query strings, redirects, and clone URLs, where logs, proxies, and browser history pick them up.
• API over-exposure. Endpoints returning more fields than the caller is entitled to, and missing tenant ownership checks on data access.
• Unsafe logging and exports. Unredacted PII and secrets in application logs, traces, caches, and dumps.
• Over-broad third-party and AI sharing. Customer data and secrets sent to vendors, analytics, LLM prompts, and vector stores beyond what's required.
• Weak storage. Regulated data stored unencrypted, or with base64, MD5, and SHA-1 standing in for encryption.
• Incomplete deletion. Delete flows that leave downstream records, caches, and related stores intact.

Plus shadow copies in staging and snapshots, over-permissioned IAM roles and OAuth scopes, and unauthenticated data stores.

From finding to fix

• Every finding includes code evidence, a data flow explanation, the exposure risk, and remediation guidance.
• AutoFix opens a fix PR where the remediation is code-level.
• Re-test any finding to confirm the issue is resolved.
• Runs against the repos you've already connected. No new data source to onboard.

Each Data Exposure Audit uses credits from your Aikido Wallet.

→ Read more about code-based DSPM

Features

• Data Exposure Audit (DSPM) - Track how sensitive data flows and where it gets exposed, read entirely from your code. No database connections, no data access to grant, just point it at your repo and fix the exposures at the source.
• Aikido Libraries - Fix open-source CVEs on the exact version you already run. No major-version bumps, no breaking changes, no refactor to schedule, only a PR you merge.
• Code Quality Repository Scans - Find code quality issues that already exist in your repositories. Use them to find and prioritize technical debt, then keep track of your results as your code evolves.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #298 new vulnerabilities over the last two weeks!

We dug into wp2shell, the unauthenticated RCE in WordPress core, read the story here. Our Attack Surface scan detects it against your exposed assets automatically, so set it up to catch any unpatched WordPress in your estate

Improvements

• General - Aikido Inbox: Admins can review ignore and snooze requests from their team
• Cloud - Noise Reduction for Container Images
• General - Bitbucket server support for PR Checks
• Cloud - K8s registry option for public image scanning
• Pentest - Reduced pricing for tiny apps
• Code Quality - PR/MR Gating by Severity
• Code Quality - Auto Resolve findings on GitHub
• Code Quality - New rule: "Keep the diff minimal"
• Device Protection - Support for Jetbrains
• Zen Firewall - Agent releases for PHP, Ruby, Golang, and Node
• IDE - New releases for VSCode, Jetbrains, and Visual Studio
• Intel - Health score for Maven ecosystem
• Settings - Bulk assignment of clouds to teams

Last updated 7 days ago

Features

• Code Quality Repository Scan (early access) - Scan your whole codebase for quality issues, not just new PRs, monitor trends and spot the hotspots worth refactoring first
• Approval Inbox for Ignores - Route every ignore request through one inbox for admin sign-off, so nothing leaves your feed without a decision.
• Noise Reduction for Secrets & CVE’s - New AI layer on top of your rules checks each secret and CVE against your code to flag what's truly exploitable and quiet what isn't

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #245 new vulnerabilities over the last two weeks! Watch the live feed → intel.aikido.dev

Improvements

• General - New Dashboard for all users
• Source Code - Azure DevOps Self-Managed Server support
• Integrations - Added ticket support for Github Server and Azure DevOps
• Cloud
  • Added Render cloud misconfiguration scanning
  • K8s namespaces added to container labels
  • Terraform module for GCP project/organization onboarding
• Device Protection
  • Disable protection for up to 1 hour
  • Added PHP composer support
• Registry Proxy - Support for Google Cloud Artifact
• Zen Firewall - Agent releases for Java, Python, Ruby, Golang, and Node
  • Node - Support for ElysiaJS
• IDE - New releases for VSCode, and Jetbrains
  • Added Jetbrains CLion
• API - List snooze and ignored issues from PR
• API - Get Device Protection SBOM
• API - Get SLA settings
• API - List AutoFix history
• API - GDPR report
• API - Get, Add, Update, Remove Container label
• API - List repository PR configuration

Last updated 22 days ago

Aikido’s secrets detection and dependency engine now have LLM agents that use reasoning to identify truly exploitable issues.

• Secrets AutoTriage helps determine whether a detected value is likely a real credential and whether it creates actionable risk.
• CVE Exploitability Analysis determines whether a CVE is likely exploitable in your codebase and how urgently it should be addressed. From there, it can act on its own: upgrading, downgrading, snoozing, or ignoring findings automatically based on rules you control.

Each run is logged, so you can see what was analyzed and what actions the agent took.

Why it matters

• Verification on top of detection: LLM agents assess open-source dependency CVEs and leaked secrets against your codebase to see what is actually exploitable.
• Smarter prioritization: findings can be escalated or deprioritized based on real-world risk (e.g., live/high-scope secrets, practically exploitable reachable CVEs).
• Short rationale included: each outcome includes an explanation so teams can review and override when needed.

How these fits into Aikido

• Secrets AutoTriage: runs after entropy detection, determining whether a discovered secret is a real, exposed value and the riskiness. Most findings are handled by defined rules, but in ambiguous cases the surrounding code is used to determine what the credential is for, its liveness, and scope.
• CVE Exploitability Analysis: adds LLM reasoning based on how your code uses the package, then it can upgrade, deprioritize, or snooze/ignore the CVE automatically based on the codebase-aware findings.

→ Read more about Secrets AutoTriage

→ Read more about CVE Exploitability Analysis

Features

• Agentic Dependency AutoFix - Let Aikido resolve complex dependency interactions for you. Perfect for projects with many interlocking dependencies.
• Registry Proxy - Your private registry can now route through Aikido, blocking malware and risky-new packages and serving safe, patched versions before they hit your code.
• Device Protection - Now covers Ruby and Rust, blocking malware on install and adding gems and crates to your device SBOM.

Aikido Intel - Malware & Vulnerability Research

Our research team has discovered more than #232 new vulnerabilities over the last two weeks! We also scanned 1.2 million newly published packages for malware and found 3,066 new ones.

Separately, our new State of AI in Security & Development 2026 report surveyed 450 CISOs and developers on how AI is reshaping security, including why 1 in 5 hit a serious incident from AI-generated code.

Improvements

• AI Pentest
  • Letter of Attestation
  • Continuous Pentest adds Azure support
  • Continuous Pentest choose branches for 'On Schedule' runs
• Labels - Import labels directly from Github
• MCP - Release with new auth flow, workspace filters, branch filter and team filters
• Code Audit - Add additional instructions before an audit
• Zen Firewall - Agent releases for Dotnet, Python, PHP, Golang and Node
• IDE - New releases for Jetbrains
• API - Manage labels on repositories
• API - List container runners

Last updated 1 month ago

Features

• Threat models, visualized - Every AI pentest & code audit now ships a diagram of your app's architecture, roles, and trust boundaries, so you get the full picture at a glance.
• Device Protection - Now available for Windows, with MDM support to roll it out across your fleet.
• Labels - Attach any metadata you want to repositories and container images (business unit, PII, region, ... ) and filter you issue feed based on those labels.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #105 new vulnerabilities over the last two weeks!

The Miasma worm just moved its trigger out of package.json and into binding.gyp, a file almost no one reviews.

Learn how it works in our latest blog.

Improvements

• Code Audit - Retest issues after fixing code
• Endpoint - Export device SBOM
• Zen Firewall - Agent releases for Dotnet, PHP, Ruby, Golang, and Node
• Package Proxy - Malware scanning for your Private Registries
• Report - New CIS K8 Benchmark report
• MCP - Release 1.0.8 added new search repositories tool
• Task Trackers - Specify which repository tasks should be created for (applies to all task managers)
• API - List Zen users
• API - Add Exception, and List Devices, Activity Logs, Exceptions, Permissions Groups for Device Protection
• API - Export Single Repostiory report
• API - List notes
• API - Support for multiple task trackers

Last updated 1 month ago

Features

AI Code Audit - Pentest-grade reasoning on your source code. Catch logic flaws and other vulnerabilities that other scanners miss, just connect a repo.

Aikido MCP - Search and fetch your Aikido issues straight from your AI coding assistant. Ask for critical findings, leaked secrets, or open vulnerabilities in any repo and act on them with your favorite AI.

ServiceNow Integration - Connect ServiceNow as a task tracker and Aikido turns security findings into tickets automatically, routing them into the workflow your teams already use.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #365 new vulnerabilities over the last month!

Among them:

Google API keys keep working after you delete them. Our testing found a deleted key can keep authenticating for up to 23 minutes, long enough for an attacker with a leaked key to reach your data and APIs, including Gemini.

Improvements

General - Ask Aikido about CVE’s through chat

Code - Release gating: SLA Mode

Cloud

• Added support for Oracle Cloud with +50 rules
• Onboard Entire Alibaba organization
• VM Scanning - Added GCP support

Pentest

• Pause Pentest
• Monorepo support

Device Protection

• Get Inbox notifications in Slack or Microsoft Teams
• Added Golang ecosystem support
• macOS silent install for MDM

Zen Firewall

• Agent releases for Dotnet, Java, PHP, Ruby, Golang, and Node
• New view to check why an IP is getting blocked

IDE

• New releases for VSCode, Jetbrains, and Visual Studio
• Added support for IaC scanning in Jetbrains

API

• List Licenses
• List Malware
• Get IDE/MCP usage statistics

Last updated 2 months ago