Open Source at Aikido
We proudly contribute to and collaborate on open source projects, working with others to drive innovation in security.
Intel
Intel is an open-source threat feed, powered by LLMs to discover vulnerabilities in open source software. (such as NPM, PyPi packages) These are vulnerabilities that otherwise may have never been disclosed. Intel reinforces your supply chain security.
Zen
Zen is an embedded Web Application Firewall that autonomously protects your apps against common, critical and even zero-day attacks.
Opengrep
Opengrep is a fork of Semgrep OSS that aims to commoditize detection of vulnerabilities in code. Initiated by Aikido, Opengrep is maintained by a group of security companies.
Replace your fragmented security tools with an all-in-one code & cloud security platform
.svg)
FAQ
Do I need to give access to my repos to test out the product?
When you log in with your VCS we don’t get access to any of your repositories. You can manually give access to the repositories you’d like to scan. It’s also possible to test out the platform using sample repositories.
What happens to my data?
We clone the repositories inside of temporary environments (such as docker containers unique to you). Those containers are disposed of, after analysis. The duration of the test and scans themselves take about 1-5 mins. All the clones and containers are then auto-removed after that, always, every time, for every customer.
Does Aikido make changes to my codebase?
We can’t & won’t, this is guaranteed by read-only access.
What do you do with my source code?
Aikido does not store your code after analysis has taken place. Some of the analysis jobs such as SAST or Secrets Detection require a git clone operation. More detailed information can be found on docs.aikido.dev.
How can I trust Aikido?
We’re doing everything we can to be fully secure & compliant. Aikido has been examined to attest that its system and the suitability of the design of controls meets the AICPA's SOC 2 Type II & ISO 27001:2022 requirements.
Does Aikido require agents?
No! Unlike others, we're fully API based, no agents are needed to deploy Aikido! This way you're up & running in mere minutes & we're way less intrusive!
Is Aikido's software pentested?
Yes. We run a yearly pentest on our platform and also have an ongoing bug bounty program to ensure the security of Zen is continuously tested by a wide range of security experts.
Do you have a bug bounty programme?
Yes we do! You can find the our bug bounty programmes on Intigriti.
.svg)
![Automate Technical Vulnerability Management [SOC 2]](https://cdn.prod.website-files.com/642adcaf364024654c71df23/67643587d60e739a2713e706_1887747146-2_e9a02ce5d4c4c0b738e209b16c20f222_2000.png)
