Share your experience using Continuous Dynamic (formerly WhiteHat Dynamic)

My main use case for Aikido Security is to scan our code base for vulnerabilities, threats, CVEs, code practices, approved patterns, and general code scanning from the developer end. Aikido Security helps to check both the code and is integrated with our CI tool.

A quick specific example of how I have used Aikido Security in my work is when it helped me catch credentials that people may have directly hardcoded in the code. Using Aikido Security, I am able to get that removed and sorted out.

Aikido Security handles bypasses or advanced threats by providing a unified environment for both code and Trivy scanning. In general, when we want to use any tool for our CI codebase, we need to have separate tools for coding and one for the container. Aikido Security unifies this by allowing code and image or container registries, so we can have it all in one.

In my opinion, the best feature Aikido Security offers is checking CVEs. Some CVEs are being bypassed by multiple tools, but here, Aikido Security scans it at a granular level, which is a valuable utility it provides.

Aikido Security has positively impacted my organization by helping to save time in terms of redeployment. Post-deployment, it is very difficult for folks to quickly check each and every test case, but when I use this tool, it helps me remediate all the bottlenecks of security and vulnerabilities over a single UI.

Aikido Security can be improved by addressing the lags in the UI and ensuring that updates can be given very quickly and rapidly.

I have been using Aikido Security for the last six to eight months.

Aikido Security is stable, and I find that any stability issues are totally based on our codebase. It remains stable even when generating a large amount of code.

Aikido Security's scalability is impressive, as it can handle growth or increased workloads easily. It can scale spontaneously to adopt newer code changes.

My experience with customer support has been good. We had some issues, and they responded very quickly. Their solutions and suggestions have been acceptable based on standard practices.

Before Aikido Security, we used SonarQube and Trivy scanning. However, we realized that those solutions incurred more resource costs, took more time to scan, and functioned within our day-to-day CI/CD flows less efficiently. Switching to Aikido Security helped us achieve a single straightforward approach, reducing the scanning time.

I can tell that I have seen a return on investment from the QA end, where they save time monitoring and checking the vulnerabilities at the code level, which also helps them to follow everything in line with our organization restrictions.

My experience with pricing, setup cost, and licensing is that the pricing is reasonable and based on the repository; they charge accordingly.

We did not evaluate other options before choosing Aikido Security.

I would add that Aikido Security will be integrated into a platform where we can check both the coding and image scan, which is very beneficial.

I would add that the integration done with other tools such as Git and CI/CD Jenkins pipeline is seamless.

I can share that we can deploy an additional two more deployments with Aikido Security. Usually, it takes four deployments per day, but now we can have two more, which makes it six deployments per day, allowing QA to navigate the security threats easily within the window.

Regarding Aikido Security's AI capabilities, I think its governance and security are quite secure. We get to use our cloud-native tool, which is seamless. Aikido Security's database is well managed by us rather than relying on SaaS.

Regarding Aikido Security's AI capabilities, I find it very reliable. Aikido Security's output is as expected.

My advice for others looking into using Aikido Security is that if the codebase and everything need to be audited and recorded in a single forum, and if they want a unified solution to scan both the code and the image, they can definitely use it. I would rate my overall experience with Aikido Security a ten out of ten.

My main use case for Aikido Security is vulnerability scanning of our internal applications. We have a development department, and we scan those applications for vulnerabilities and other security issues.

In addition to my main use case, we have samples where clients want to see security information reports from our internally developed systems. We generate those reports with Aikido Security, and then we are able to show them how we are aligned with best practices and frameworks such as ISO 27001.

The best features Aikido Security offers are the ability to generate reports aligned with security frameworks and how well we accomplish alignment with those security frameworks.

The level of detail and the way Aikido Security matches every topic from frameworks make the reporting and alignment with security frameworks stand out. It divides the report topic by topic of the framework.

I can assign to my developers the things I want them to change, which is an important feature of Aikido Security.

Aikido Security has positively impacted my organization because we feel more secure. We have a good monitoring system for vulnerabilities through Aikido Security, and we are able to show our clients our security posture and the security posture of our internal systems.

Since using Aikido Security, it has become easier for us to show evidence about compliance. For example, when auditors want to check those kinds of things, we are able to show them how we are in compliance with ISO 27001 and in compliance with development best practices.

Aikido Security's governance and security capabilities are great. It is quicker to access the features and easiest to get accurate information regarding vulnerabilities and changes we need.

The accuracy and reliability of output from Aikido Security are excellent. It is very accurate, and we always have the latest information from the topics we are working on.

Aikido Security could be improved by allowing us to scan the entire network, not just the applications, but also devices such as computers and servers, to have all vulnerability reports for my entire infrastructure.

Everything else is fine for me regarding needed improvements. The interface of Aikido Security is intuitive and very easy to use.

I have been using Aikido Security for at least two or three years.

Aikido Security is stable. We have not had any issues since we started using it.

The scalability of Aikido Security is good. I think it is solid, and we have not had any issues with it. We are able to work on a daily basis without any constraints.

The customer support for Aikido Security is great.

Aikido Security is the first solution for the company regarding development vulnerabilities. Before choosing Aikido Security, I did evaluate other options, but I do not remember the other ones because it was three years ago.

My advice for others looking into using Aikido Security is to take into account that they will get a robust solution with AI capabilities and a perspective aligned with a security framework, which is very important.

A specific example of how I use Aikido Security in my workflow is that when we have a new build for an application developed internally, we scan that build and then proceed to see what happens and what the Aikido Security results from the scan are. I then communicate to the development team the things they have to update, create, or change to be able to mitigate those breaches.

I would rate this solution a ten out of ten.