.png)
Agentless Virtual Machine Scanning
Secure everything running in prod - no agents, no overhead.
Uncover blindspots- Low bandwidth cost
- Agentless
.png)
“We had experience with other tools, but we wanted to revisit the market and see what the state of play was. Aikido quickly stood out as a top choice.”
"We actually consider Aikido a bit of a learning platform for our developers, because the issues come with very clear explanations.”
Security is no longer an afterthought. With Aikido, we’re integrating it directly into our DevOps pipeline to ensure it’s a seamless part of our workflow.
.svg){kind=logo}
See the risks & Fix them fast
The Problem
Not all production changes are tracked.
One undocumented release can expose your VM to threats.- Code is secure, but what about your live VM?
Manual or undocumented releases bypass security checks. - Traditional tools stop at the build.
Your VM might be running something no one reviewed. - Production security is often assumed.
But assumptions don’t stop vulnerabilities. - VM security tools are invasive.
Agents slow things down and disrupt performance.
The Aikido Solution
Scan your VM silently.
No agents, no impact, just clarity.- Catch what others miss.
Agentless VM scanning from backup. - Scan your production VM directly.
No installs, no risk. - Know for sure with hands-off VM scanning.
- Our scan uses just a backup.
No load, no downtime.
Uncover Blindspots
Simple to Deploy and Run
Get Instant Visibility into your Cloud Security.
Up to 50% Less Bandwidth Cost
Recalculated Vulnerability Severity Scores
Reinventing Traditional VM Scanning
Traditional VM Scanning falls short
- Hidden risks: Even with secure code, outdated software like OpenSSL on your server can expose you.
- Heavy & costly: Traditional VM scanning requires spinning up additional machines, consuming bandwidth and compute resources.
- Intrusive Agents: Many solutions require installing agents that customers don’t trust to run on their infrastructure.
Aikido’s VM Scanner: fast, efficient, and non-intrusive
- No Agents. No Hassle. Instead of installing software on your VMs, we read directly from cloud snapshots, keeping your infrastructure untouched.
- Bandwidth efficient: By analyzing the partition table before downloading, we reduce data transfer by up to 50%, cutting
- Full Visibility: Go beyond source code scanning. See what’s running in production and patch vulnerabilities proactively.
How it works
1. Snapshot-based scanning:
We access cloud-native backups (AWS, Azure, GCP) to analyze production environments.
2. Smart partition analysis:
We detect critical files without downloading unnecessary data, optimizing scan performance.
3. Comprehensive risk detection:
Identify vulnerabilities across source code, infrastructure, and production environments.
4. Actionable Fixes:
Our AI-powered insights help you patch vulnerabilities before they become exploits.
Replace your fragmented security tools with an all-in-one code & cloud security platform
FAQ
How and where is the data stored?
All scan data remains in the same cloud region as your VM. We scan the backup image, generate a vulnerability report, and then immediately delete the backup. No raw data is retained—only the final results are saved securely for your review.
What access rights does Aikido’s VM scanning need?
None of your credentials are required. Aikido doesn't need SSH keys, usernames, or passwords. We simply request permission to create a temporary backup (VM snapshot) of your VM. That’s it. The scan happens safely and completely outside your live server.
How is Aikido able to reduce the bandwidth cost by up to 50%?
Traditional tools often download the entire volume, but Aikido is smarter. We only download the used portion of your disk—not the entire allocated space. So if your 40GB volume is only using 10GB, that’s all we scan. This optimization can cut bandwidth usage by 5% to 50% or more, depending on your OS and file system.
What would my bandwidth cost be?
Bandwidth usage depends on the size of your VM’s volume. Aikido scans your VM by creating and analyzing an snapshot—this incurs a minimal transfer cost: approximately $0.01 per GB in the US, and $0.02 per GB (AWS) in other regions. Actual bandwidth will vary depending on your VM size.
Why should you scan your Virtual Machines?
Virtual Machines can contain vulnerabilities that you can’t detect by just scanning your repositories. They could create another attack path.
Which clouds do you support?
Currently Aikido supports AWS, Azure & GCP. Read the docs for detailed information.
Just try it yourself
