Aikido Security Reviews

I have been using Aikido Security for approximately more than one year, primarily for securing our development pipelines and scanning our codebase for vulnerabilities across multiple projects.

The use case is definitely developer-first vulnerability management. Aikido Security nests directly in our development workflow and it catches security issues before they reach production. It integrates with GitHub very well. Pull requests get automatically scanned. From that point of view, security becomes part of development rather than an afterthought.

I used it mainly for three things. The first one is static code analysis, open-source dependency vulnerability scanning, and container image scanning. It has become our primary security layer in our development workflow.

When talking about the features, there are several powerful features they have. The first one is static application security testing or SAST. It scans source code for vulnerabilities automatically.

It identifies vulnerable open-source dependencies in our project. Container scanning checks Docker images for known vulnerabilities before deployment. Infrastructure as code scanning scans Terraform and other IaC files for misconfigurations.

The unique feature is secret detection, which automatically finds accidentally committed API keys, passwords, or tokens in code. Also, Auto-Triage intelligently filters false positives so developers only see real, actionable issues.

The impact was significant and immediate. Security shifted left, meaning issues were caught during development rather than after deployment. That alone reduced our remediation costs dramatically, since fixing issues early is always cheaper than fixing them in production. Developer confidence has increased. The team members felt more secure pushing code knowing Aikido Security was continuously scanning. Our comprehensive posture improved with clear visibility into all vulnerabilities across our entire codebase, which made security audits much smoother as well.

There are a few areas for improvement. The first is scan speed. For large repositories, initial scans can be slow. Incremental scanning helps, but full scans still take considerable time. The second thing is the false positive rate. While Auto-Triage is good, it is not perfect. Occasionally, genuine issues get filtered out and real false positives slip through. The third one is remediation guidance. Aikido Security tells you what is vulnerable, but sometimes the fix suggestions are generic. More specific, actionable remediation steps would save developer time. The fourth one is IDE integrations. It currently works best in CI/CD pipelines. A proper VS Code or JetBrains plugin for real-time scanning while coding would be a significant improvement.

From a customer point of view, the following things could change. The first thing is documentation for custom rules. Aikido Security allows you to create custom scanning rules, but the documentation for this feature is surprisingly thin. I spent considerable time in community forums and with trial and error just to configure basic custom rules. Step-by-step guides with real-world examples would make this feature much more accessible. The second thing is better Slack and communication integrations. Currently, security alerts come through email and dashboard notifications, but our team lives in Slack. A more configurable Slack integration that sends contextual alerts directly to the relevant developer, not just a generic channel notification, would dramatically improve response time. The third one is historical trend reporting. While Aikido Security shows current vulnerability status well, generating historical reports showing security posture improvement over time is limited. For presenting security progress to management or stakeholders, better exportable trend reports would be very valuable.

I have been working with Aikido Security for more than two years.

Aikido Security is stable.

From an integration stability perspective, the GitHub integration was rock solid. I never experienced a broken webhook or missed scan trigger throughout our use. That kind of reliability becomes invisible when it works well, which is exactly what you want from a security tool running in your CI/CD pipelines. However, there are two minor stability observations worth mentioning. The first one is during peak hours when multiple large repositories triggered simultaneous scans, there were occasional queuing delays of five to ten minutes. Not a deal-breaker, but noticeable. The second thing is, on two occasions after product updates, the dashboard briefly displayed stale vulnerability data before refreshing. A minor issue, but slightly concerning for a security platform where data freshness matters.

The customer support experience was genuinely positive, especially for a relatively young company. Onboarding support was excellent. Their team proactively reached out after signup to ensure we were set up correctly. Response time for support tickets averaged twelve to twenty-four hours, which is faster than most enterprise security tools. The documentation is clear and well-maintained. Their changelog is also very transparent, with regular product updates and clear explanations. I would rate support an eight out of ten, one of the better support experiences in the developer tools space.

I did a thorough evaluation before choosing Aikido Security. I looked at several alternatives. The first one was Snyk, which was my previous tool. Snyk is the market leader in developer security and has excellent dependency scanning. However, the pricing was significantly higher, especially as our repository count grew. Alert noise was also a consistent frustration, with too many false positives requiring manual triage. Aikido Security's Auto-Triage was noticeably better in our testing. The second thing is Semgrep. It is also a very powerful static analysis tool and highly customizable, but the customizability that makes it powerful also makes it complex to configure. For my small team, I needed something that worked well out of the box without significant configuration overhead. Semgrep felt more suited to large security teams with dedicated AppSec engineers. I chose Aikido Security because it is the best one.

I purchased directly through Aikido Security's website. The signup and onboarding process was very straightforward. Connecting my GitHub organization, I was scanning within minutes, with no complex procurement process needed. Aikido Security's pricing setup follows a repository-based pricing model. The cost scales with the number of repositories being scanned. For small teams, the entire price is very reasonable. The setup cost was essentially zero, with no professional services or implementation fees. The self-service onboarding took less than thirty minutes to connect all repositories and configure scan rules. Licensing is a straightforward annual or monthly subscription, with no per-user fees, which is developer-friendly. Overall, it is one of the most transparent and accessible pricing models I have seen in the security tools space.

The return on investment with Aikido Security was very clear and measurable across multiple dimensions. First and most significant is the cost of prevented breaches. Aikido Security caught a critical remote code execution vulnerability in my Python machine learning pipelines before it reached production. Industry estimates put the average cost of a data breach for a small to mid-sized company at anywhere between one hundred thousand to five hundred thousand dollars. When you factor in incident response, legal costs, customer notification, and reputation damage, preventing even one such incident more than justified my entire annual subscription many times over. The second one is developer time savings. Before Aikido Security, my senior developers spent roughly six to eight hours per week manually reviewing code for security issues and triaging vulnerability alerts from multiple tools. After Aikido Security, that dropped to approximately one to two hours per week, a saving of nearly seventy-five percent of security review time. Across a team of five developers, over a year, that translated to hundreds of recovered engineering hours redirected towards actual product development. The third one is tool consolidation savings. I replaced Snyk and a separate secret scanning tool with Aikido Security alone. That consolidation saved approximately four hundred to five hundred dollars monthly in subscription costs while actually improving our security coverage.

My relationship with Aikido Security is purely as a customer. There is no partnership, no reseller agreement, no referral agreement, and no affiliate relationships of any kind beyond my standard subscription. Everything I shared in this interview is based entirely on genuine, hands-on experience, and my opinions are completely my own.

I have several practical pieces of advice for anyone considering Aikido Security. The first one is to connect all repositories from day one, not just your main production ones. Security vulnerabilities hide in unexpected places such as internal tools, side projects, and experimental repositories. Full coverage from the start gives you complete visibility. The second one is to spend time configuring Auto-Triage rules early. The default settings are good, but customizing triage rules for your specific tech stack significantly reduces noise. Invest that configuration time up front, and you will thank yourself later. The third one is to integrate with your existing workflow immediately. Connect Aikido Security to your GitHub pull request process from day one. Make security scanning a non-negotiable part of every code review. If you add it as optional, it will get ignored. Use it as a developer education tool. Aikido Security does not just find vulnerabilities; it explains why they are dangerous. Encourage developers to read those explanations. Over time, our entire team's security knowledge improved naturally. I would rate this product an eight out of ten overall.

My main use case for Aikido Security is to scan our code base for vulnerabilities, threats, CVEs, code practices, approved patterns, and general code scanning from the developer end. Aikido Security helps to check both the code and is integrated with our CI tool.

A quick specific example of how I have used Aikido Security in my work is when it helped me catch credentials that people may have directly hardcoded in the code. Using Aikido Security, I am able to get that removed and sorted out.

Aikido Security handles bypasses or advanced threats by providing a unified environment for both code and Trivy scanning. In general, when we want to use any tool for our CI codebase, we need to have separate tools for coding and one for the container. Aikido Security unifies this by allowing code and image or container registries, so we can have it all in one.

In my opinion, the best feature Aikido Security offers is checking CVEs. Some CVEs are being bypassed by multiple tools, but here, Aikido Security scans it at a granular level, which is a valuable utility it provides.

Aikido Security has positively impacted my organization by helping to save time in terms of redeployment. Post-deployment, it is very difficult for folks to quickly check each and every test case, but when I use this tool, it helps me remediate all the bottlenecks of security and vulnerabilities over a single UI.

Aikido Security can be improved by addressing the lags in the UI and ensuring that updates can be given very quickly and rapidly.

I have been using Aikido Security for the last six to eight months.

Aikido Security is stable, and I find that any stability issues are totally based on our codebase. It remains stable even when generating a large amount of code.

Aikido Security's scalability is impressive, as it can handle growth or increased workloads easily. It can scale spontaneously to adopt newer code changes.

My experience with customer support has been good. We had some issues, and they responded very quickly. Their solutions and suggestions have been acceptable based on standard practices.

Before Aikido Security, we used SonarQube and Trivy scanning. However, we realized that those solutions incurred more resource costs, took more time to scan, and functioned within our day-to-day CI/CD flows less efficiently. Switching to Aikido Security helped us achieve a single straightforward approach, reducing the scanning time.

I can tell that I have seen a return on investment from the QA end, where they save time monitoring and checking the vulnerabilities at the code level, which also helps them to follow everything in line with our organization restrictions.

My experience with pricing, setup cost, and licensing is that the pricing is reasonable and based on the repository; they charge accordingly.

We did not evaluate other options before choosing Aikido Security.

I would add that Aikido Security will be integrated into a platform where we can check both the coding and image scan, which is very beneficial.

I would add that the integration done with other tools such as Git and CI/CD Jenkins pipeline is seamless.

I can share that we can deploy an additional two more deployments with Aikido Security. Usually, it takes four deployments per day, but now we can have two more, which makes it six deployments per day, allowing QA to navigate the security threats easily within the window.

Regarding Aikido Security's AI capabilities, I think its governance and security are quite secure. We get to use our cloud-native tool, which is seamless. Aikido Security's database is well managed by us rather than relying on SaaS.

Regarding Aikido Security's AI capabilities, I find it very reliable. Aikido Security's output is as expected.

My advice for others looking into using Aikido Security is that if the codebase and everything need to be audited and recorded in a single forum, and if they want a unified solution to scan both the code and the image, they can definitely use it. I would rate my overall experience with Aikido Security a ten out of ten.

I used Aikido Security at my previous organization for almost two to three weeks because we had to achieve SOC 2 compliance for our current codebase.

The main use case for Aikido Security was to resolve the vulnerabilities in the packages we were using. I wanted to remove the vulnerabilities from them and update to the latest stable version. A couple of code changes along with package changes were also involved.

Aikido Security helped me with the vulnerabilities and package updates through a simple workflow where I just had to open Aikido Security dashboard, connect my GitHub account, select the repository and scan it. After scanning it, Aikido Security would raise a PR for each vulnerability, specifying what those vulnerabilities were. I would then merge the PR, and it would also run the test cases that I already had attached to my codebase.

Regarding my main use case with the workflow, the process was straightforward. However, there was one minor issue that I faced. When I had a UUID for an object in the code, Aikido Security was considering it as a secret key, which it was not. This was a false positive alarm, but it was not a major issue and merely feedback I wanted to provide.

The best features Aikido Security offers include instantly raising PR by just identifying the vulnerabilities.

When I say instant raising of PR, it helped my workflow by making the process super easy and quick. Initially, I thought I would need to pick the right vulnerability from the internet, update my codebase accordingly, and then ask an engineer to do it. This usually takes about three or four days for one vulnerability, and maybe a week for a bunch of vulnerabilities. However, with Aikido Security it took me two to three hours.

Aikido Security has positively impacted my organization significantly because initially we were thinking it would take a month for us to achieve SOC 2 compliance again. With Aikido Security, we were able to get all codebase vulnerability fixes within a week for all our 13 or 14 repositories that we had.

To improve Aikido Security, the main thing I would suggest is regarding the UUID that was being flagged in the codebase. I had a certain object with a UUID that was being considered as a private secret key or API key, which was not the case. It was a false positive alarm, and if Aikido Security solves that, then it will be perfectly fine.

I have been using Aikido Security for around two to three weeks.

Aikido Security is stable.

Aikido Security is pretty scalable. We did not encounter any problems, so it worked seamlessly for us.

I did not previously use a different solution.

Before choosing Aikido Security, we tried GitHub Copilot and observed how the GitHub Copilot agent performed. It did a horrible job, so we moved to Aikido Security.

I have seen a return on investment with time saved. We needed fewer employees because of that as well. We got SOC 2 compliant very fast with Aikido Security. We were expecting to complete the compliance in a month, but I figured out Aikido Security could do it within a week for all our 13 repositories.

My advice for others looking into using Aikido Security is that you should give it a try. Aikido Security will resolve all your vulnerabilities quickly, and if you have test cases already written in your branch, it will do a pretty good job. I would rate this solution a 9 out of 10.

My main use case for Aikido Security is to perform SAST, security code review of codes provided by developers, and SCA determination or dependency checks.

I used Aikido Security during an engagement where I performed SAST on a code to review what flags or vulnerabilities are part of the codebase. I identified many critical and high-level vulnerabilities, which helped to further mitigate those so that in production, there are no such issues.

Additionally, I perform SCA determination with Aikido Security to check that dependencies are not vulnerable in nature, ensuring all are safe and no vulnerabilities are present in the dependencies.

Aikido Security offers the best features including being very easy to use, allowing even a normal tech person with some hands-on experience to use this tool and clearly get the results they want. If we go for DAST also, it is very good.

The ease of use of Aikido Security helps my daily workflow since I can upload my whole codebase, and it will identify at each line where the vulnerabilities are present and provide recommendations to fix and related vulnerabilities, detailing what those vulnerabilities are and how they will impact the whole code or the infrastructure.

Aikido Security has positively impacted my organization by reducing a lot of work to manually check each line of code; the process goes on and on. Iterations have increased due to manual work, but the iterations which earlier took around seven to eight are now only taking two to three. Using that, a lot of our time gets saved.

For a secure code review or SAST, usually we are taking around seven to ten days, but using Aikido Security, we complete the activity within two to three days.

I think Aikido Security could improve by reducing some pricing model. I checked the pricing, but it is a little high for a normal person if a single person wants to use it for themselves. Pricing is quite high for a normal user, and if they can make it a little less, it will be much better.

I started with a free tier, which could include some features of DAST so that users can understand how it will work when a person purchases a license for Aikido Security. This way, new users will be much more aware of the good features of this product, demonstrating that this tool will definitely help them.

Aikido Security's pricing model is a little bit high for a normal person, around $250 per month. If you have a small team, you can definitely go for that and work within their designated period of time. However, if you are a normal person just wanting to perform DAST for entry-level and understand its workings, you can choose the free tier, which also provides a lot of information.

I have been using Aikido Security for the last four to five months,

Aikido Security is very stable.

Aikido Security is quite scalable in nature; you can deploy it on your team, and if you have a large team, it works very well.

Customer support is good; if you raise a query, hardly within a day, your issues get resolved, and designated teams contact you instantly, with tickets getting created and all the tracking happening very smoothly.

I haven't used a different solution, but I have listened about Checkmarx and other tools; however, they don't seem to perform well. I definitely used Aikido Security, and after that, I don't want to switch to any other. It is very good.

You can say we have seen a return on investment in time saved. Regarding pricing, I don't know how much ROI we have saved, but you can say the task, which usually took around seven to eight days, now takes two to three days, hardly three days. Within that, we just complete the task using Aikido Security, so we save around three to four days.

Before choosing Aikido Security, I evaluated other options such as Checkmarx, Semgrep, and SonarLint. These are in the market, but Aikido definitely performs better than all of them, and its customer support is very good. That's why I chose Aikido Security. I compared online reviews, and Aikido seems to be very promising in that nature, so I chose Aikido Security from my point of view.

Regarding Aikido Security's accuracy and reliability of output, I can say its reliability is 80 to 90%. It definitely works and delivers very good results, easily identifying if you need clarification with the type of vulnerability it has identified and providing a more detailed review of each of them.

If a person is looking for a SAST, DAST, and a complete combination of a pack of security tools, then Aikido Security is best. It helps to perform SAST, DAST, which is dynamic application testing, and most tools don't combine all of them in one. You can also scan your cloud and your infrastructure as code things, covering all the wide areas of your project, so that type of person can definitely choose Aikido Security.

I would rate my overall experience with Aikido Security as an 8 out of 10.

My main use case for Aikido Security is detecting security issues and triaging, and if there is any security risk, we detect and fix those security fixes.

I use Aikido Security for detecting and fixing security risks by implementing a DevOps pipeline using a static application security testing tool, which helps automate the detection of exposed secrets and checks for any malicious open-source packages, making it easier for developers to prepare a list of issues they need to fix. Our goal is to ensure all repositories are free from any security issues, monitor cloud configurations that are not done correctly, scan images for runtime threats, and perform automated penetration testing to simulate real-world attacks, detecting any loopholes. It also helps improve developers' productivity by filtering out false positives and generating AI fixes with a single click for identified vulnerabilities.

The main use case for Aikido Security is to perform static application security testing whenever a developer checks in code to ensure there is no malicious code checked in.

The best features Aikido Security offers include code supply chain scanning, cloud container security to monitor for misconfigurations or runtime threats, automated penetration testing, and the Autofixes feature, which is a new addition in recent versions and helps fix most security issues.

The feature I find myself relying on the most is code and supply chain scanning, which makes it easier to automate the detection of any security issues, helping to fail the build if there is any malicious code.

Aikido Security has positively impacted my organization by improving overall code quality, enabling us to develop a secure product, and drastically improving our reputation among customers. We now have all types of reports and dashboards, allowing any stakeholder or management to easily check how much work has been done and the product's security status.

The biggest outcome I have seen from using Aikido Security is improved code quality.

There is still a lot of scope for improving the automated fixes with Aikido Security.

I would like to see some alerts and configurations added as specific improvements.

I rate it an eight because there are some gaps and issues with certain features, particularly in identifying issues and marking them as positive, as well as finding real false positives. By addressing these issues, they can improve the score.

Regarding Aikido Security's AI capabilities, it lacks in governance and security; while it uses contextual AI to dismiss false positives automatically, we still conduct manual reviews. Since it's still a premature feature, we do double-check AI-related fixes and review any custom AI rules that allow the team to write guidelines for AI-powered PR checks.

The accuracy of Aikido Security's output is still not very high, and there are a few features where they are still lacking behind regarding accuracy.

I have been working for two years in my current field.

Aikido Security is stable.

Aikido Security's scalability is shifting; it helps to transition the clunky security approach to a developer-first AppSec.

I would say customer support is average.

I would rate the customer support a six out of ten.

I previously used different solutions such as the Semgrep open-source tool and other open-source tools for detecting configuration issues, including OWASP, and while some projects still use Semgrep and OWASP, we have switched to Aikido Security.

We were able to close 90% of issues with the help of Aikido Security tools, providing a return on investment.

Regarding my experience with pricing, I know we have some open-source tools in use; however, Aikido Security has a plan for $4,200 annually for up to 10 users.

Before choosing Aikido Security, I evaluated other options such as TruffleHog, which is also free, and I also assessed Snyk, Checkmarx, Black Duck, and Veracode.

We were able to close 90% of issues with the help of Aikido Security tools, providing a return on investment.

I would advise others looking into using Aikido Security to evaluate several options based on their specific requirements for SAST, DAST, and SCA, including how much they want to automate and their budget for security tools. While there are better options available, some might be expensive, and there are free options that don't provide the same features as Aikido Security.

I would rate this review an eight overall.

My main use case for Aikido Security is vulnerability scanning of our internal applications. We have a development department, and we scan those applications for vulnerabilities and other security issues.

In addition to my main use case, we have samples where clients want to see security information reports from our internally developed systems. We generate those reports with Aikido Security, and then we are able to show them how we are aligned with best practices and frameworks such as ISO 27001.

The best features Aikido Security offers are the ability to generate reports aligned with security frameworks and how well we accomplish alignment with those security frameworks.

The level of detail and the way Aikido Security matches every topic from frameworks make the reporting and alignment with security frameworks stand out. It divides the report topic by topic of the framework.

I can assign to my developers the things I want them to change, which is an important feature of Aikido Security.

Aikido Security has positively impacted my organization because we feel more secure. We have a good monitoring system for vulnerabilities through Aikido Security, and we are able to show our clients our security posture and the security posture of our internal systems.

Since using Aikido Security, it has become easier for us to show evidence about compliance. For example, when auditors want to check those kinds of things, we are able to show them how we are in compliance with ISO 27001 and in compliance with development best practices.

Aikido Security's governance and security capabilities are great. It is quicker to access the features and easiest to get accurate information regarding vulnerabilities and changes we need.

The accuracy and reliability of output from Aikido Security are excellent. It is very accurate, and we always have the latest information from the topics we are working on.

Aikido Security could be improved by allowing us to scan the entire network, not just the applications, but also devices such as computers and servers, to have all vulnerability reports for my entire infrastructure.

Everything else is fine for me regarding needed improvements. The interface of Aikido Security is intuitive and very easy to use.

I have been using Aikido Security for at least two or three years.

Aikido Security is stable. We have not had any issues since we started using it.

The scalability of Aikido Security is good. I think it is solid, and we have not had any issues with it. We are able to work on a daily basis without any constraints.

The customer support for Aikido Security is great.

Aikido Security is the first solution for the company regarding development vulnerabilities. Before choosing Aikido Security, I did evaluate other options, but I do not remember the other ones because it was three years ago.

My advice for others looking into using Aikido Security is to take into account that they will get a robust solution with AI capabilities and a perspective aligned with a security framework, which is very important.

A specific example of how I use Aikido Security in my workflow is that when we have a new build for an application developed internally, we scan that build and then proceed to see what happens and what the Aikido Security results from the scan are. I then communicate to the development team the things they have to update, create, or change to be able to mitigate those breaches.

I would rate this solution a ten out of ten.

I use Aikido Security for identifying security vulnerabilities in code and dependencies and cloud configurations. In my full-stack project, Aikido Security helped to detect the vulnerable packages and security issues before deployment, thereby improving application security. It also provides actionable recommendations that make it easier to fix issues quickly during deployment.

Aikido Security offers vulnerability scanning, dependency monitoring, cloud security insights, cloud security checks, and an easy-to-use dashboard. The Aikido Security dashboard updates frequently, so I am able to access information in case of emergency or urgent situations. The dashboard itself is in a neat format and very clear-cut, so I am able to use it in an easy manner.

It saves time by prioritizing importance and security issues and reducing alert failures. Aikido Security has improved my project security by helping me identify issues early and increasing my confidence before deployment. My favorite feature is the dependency vulnerability scanning because it quickly identifies the risk in third-party packages, which saves me time in finding vulnerabilities.

I think Aikido Security could be improved with more detailed remediation guidance, such as additional beginner-friendly tutorials and enhanced customization for alerts and reporting. There is room for improvement in customization, reporting, and learning resources for new users.

I have been working with Aikido Security for approximately one to one and a half years in my current field.

I do not think Aikido Security has any downtime or issues with reliability. The platform has been reliable and provides accurate security findings. I have not faced any downtime or issues with it, and Aikido Security is fully stable.

Aikido Security scales well by supporting multiple projects, repositories, and development teams on a single platform.

I have not reached out to customer support, but the documentation and onboarding resources were helpful.

Before Aikido Security, I mainly relied on manual checks and basic security tools, which were less comprehensive. I was supporting multiple projects and repositories through manual methods and basic security tools that were less comprehensive.

I use Aikido Security in the cloud-hosted SaaS version, which was easy to set up and access.

Aikido Security has great accuracy in finding vulnerabilities and management. The reliability has been very useful with remediation guidance, providing accurate security findings with helpful remediation.

Aikido Security is an investment that saved my time by automating security checks and helping identify issues early before they become costly problems.

With Aikido Security pricing, I have not used any paid version yet and am using the free version, which is very useful for my experience. Aikido Security is delivering a cloud-based SaaS platform. I used the free trial, which was sufficient for evaluating the platform and its core features. It saved my time by automating security checks.

Aikido Security saved me several hours each week by automating vulnerability scanning and security checks, reducing the need for manual review and helping me focus on more development.

If you are starting out, use Aikido Security early in development to catch security issues sooner and build more secure applications. Aikido Security provides strong visibility into security risk, vulnerability management, and compliance-related insights in governance and security. I would rate this product an 8 out of 10.

My main use case for Aikido Security is to utilize it as part of our vulnerability management program, where we also scan our images, codes, and manage our SBOM.

A specific example of how I use Aikido Security in our vulnerability management program occurs every time new code is pushed into our repositories. Aikido scans for this new code and raises new vulnerabilities within these new codes. Then, with our automations, a Jira ticket gets created, our engineering team takes a look at it, and adjusts security if needed, resolving it within a few days.

Additionally, we use Aikido Security to generate a current status of our software, and I have created an automation that daily exports all of the vulnerabilities our software has, groups them by severity, and generates a report that can be shared with our customers.

In my experience, the best feature Aikido Security offers is its ease of use, as it was really easy to onboard our engineers into adopting Aikido Security in their day-to-day lives.

The reason onboarding my engineers with Aikido Security was so easy is the user interface. The first thing our engineers see when they log in is a feed of vulnerabilities that their own repositories are affected by, which helps them focus only on their work at hand.

I would also like to add that the integrations part is really useful, as all of the integrations we have added so far, mainly Jira, IDE, and API integrations, are really easy to use because they are backed by strong documentation that they maintain daily. This is a commendation to them.

Aikido Security has positively impacted our organization by helping us reduce the complexity in managing our vulnerabilities. We now have a single source of truth with Aikido Security, allowing us to get rid of manually maintained automations that we previously had.

I think Aikido Security could be improved by addressing its Jira integration, which I feel needs a bit of work. For my preferences, it is a bit too rigid. They recently added the capability of having custom fields, but before that, they did not have it.

Additionally, I would love to see a Terraform module for Aikido Security, although I know this might be a bit much to ask.

Customer support for Aikido Security is incredibly efficient. I can get an answer to a question within two or three minutes.

I chose a rating of ten because after reviewing several other products, Aikido Security was the easiest to use, the easiest to onboard, and the one with the most active customer support. I have a Slack channel with them where I can ask whatever I need and they will respond within minutes, which really helps us.

Positive

We previously used community Trivy, and we switched mainly because we did not want a solution that needed maintenance. Community Trivy was run within our automations, and we wanted something that would run without our intervention.

My experience with the pricing, setup cost, and licensing was very easy, as all information is already public. They have their pricing tiers publicly available to everyone. We also had help from our customer success manager who was with us the whole way.

While I cannot talk about money saved because I do not manage any financial decisions or have access to financial information, I can say that we have saved a lot of time. We no longer need our internal automations that were running in our internal Lambda deployments, which were quite slow and needed a lot of maintenance from our engineers. Since we got rid of that, our productivity has increased, I believe, by thirty-two percent.

Before choosing Aikido Security, we evaluated Aqua Security and Ox Security.

Since switching to Aikido Security, I have noticed a positive impact on my team's productivity with measurable results, as we now have measurements. Before, we did not even know how many vulnerabilities were raised per new functionality. We lacked a lot of visibility because reporting of vulnerabilities was not automated. New vulnerabilities were being raised by our automations, but tickets were not created automatically. We have gained a lot of productivity by not having to review the vulnerability reports themselves, but only needing to review the Jira tickets, which makes it much easier for our engineers.

My advice for others looking into using Aikido Security is to invest time in reading their documentation, as Aikido Security functionality can be exploited very much. I would rate this review a ten overall.