What is Aikido Security?
Aikido is an application security platform that scans code, dependencies, secrets, containers, cloud settings, infrastructure as code and web apps, and also sells AI-driven pentests. The vendor's pages say AI is used for AutoFix, AutoTriage, AI code analysis, deep pull request review, pentesting and an assistant called Aikido Agent; it runs as a web app with IDE, CI/CD, git and cloud integrations.
Who it's for
Development and security teams that want one place for code and cloud scanning; the pricing page offers a free plan for small setups and bundles of 10 or more users on paid plans. The page also lists up to 30% off for startups (under 1.5M in funding and under 10 team members) and says all non-profits are eligible.
Pros & cons
Strengths
- The pricing page lists a free-forever Developer plan with no credit card required, and the homepage lists scanner types for dependencies (SCA), SAST, secrets, DAST, container images, cloud misconfigurations, infrastructure as code, Kubernetes and virtual machines.
- Aikido says it does not store customer code after analysis: each repository is cloned into a fresh Docker container that is wiped and terminated afterward, with stated exceptions for AutoFix diffs and a SAST AutoTriage call tree kept up to 2 weeks.
- Aikido says all AI operations are inference-only, that it never uses, stores or trains on customer data, and that small anonymized code fragments may be used to keep triage and fixes accurate (Aikido Agent help page).
- The Trust Center says Aikido is ISO 27001:2022, ISO 42001 and SOC 2 Type II compliant, FedRAMP Class C (Moderate) certified and in compliance with GDPR; these are vendor statements.
- The help docs say customer data is stored in AWS in-region (EU, US, US Gov, ME and AU), integrations request read-only access by default, and a Local Scanner keeps code on-premise.
- Aikido Agent is documented as handling chat about findings, SAST and secrets AutoTriage, CVE exploitability analysis for dependencies and containers, and natural-language custom reports.
Limitations
- The Developer plan lists 10 repos, 2 container images, 1 domain and 1 cloud account, with IDE plugin scans for JavaScript and secrets only and malware blocking for NPM and PyPI only. The pricing page disagrees with itself: the plan card lists 10 AI AutoFixes a month, while a footnote says the free plan does not include AutoFix, AutoTriage and Code Quality.
- Advanced AI features such as AI pentesting, deep PR reviews and AI code analysis use credits. The page lists credits on Pro (100 a month) and Advanced (200 a month) but not on Basic or Developer; an Aikido Max add-on with unlimited monthly credits is available by quote, and a fair usage policy applies.
- Pentests are priced separately from the platform plans. The pricing page lists a typical pentest at $4,000 per assessment and a rightsized pentest from $50 to $30,000+, and the help page prices them in credits at 1 credit = $1 (standard pentest 4,000 credits).
- Pro and Advanced both show $600 a month, and the page does not explain the difference in price. A 10% off annual toggle is shown without saying which plans it applies to or whether the displayed price is monthly or annual; prices exclude taxes, and no trial length, refund or cancellation terms are stated.
- Retention beyond code is stated only in part: the privacy policy says service data is kept for the length of the customer relationship and lists servers in Europe and the United States, while the help docs list five regions. The Trust Center page itself gave no hosting region. The AI Policy that Aikido points to for AI data details was not read.
Plans and pricing
- Developer: $0. Free forever, no credit card; includes 2 users, 10 repos, 2 container images, 1 domain, 1 cloud account, 250k protected requests a month; rescans every 3 days. AutoFix is listed as 10 a month on the card but excluded in a footnote.
- Basic: $300 a month. 10, 15 or 20 users; 100 repos, 50 container images, 3 domains, 3 cloud accounts; unlimited AI AutoFixes; adds PR security review, Jira/Linear sync, compliance sync, code coverage and PR code quality checks. 10% off annual is advertised.
- Pro: $600 a month. 10 to 50+ users; 200 repos, 100 container images, 10 domains, 10 cloud accounts; adds on-prem and virtual machine scanning, attack surface monitoring, malware detection and 100 credits a month.
- Advanced: $600 a month. 10 to 50+ users; 500 repos, 200 container images, 20 domains, 20 cloud accounts; adds a broker for internal apps, private registry proxy, SIEM integration, priority support in Slack or Teams and 200 credits a month.
- Enterprise: Custom. Price not listed; custom limits and users. Contact Aikido for terms.
Read from the official pricing page on 2026-10-24. The page shows a 10% off annual toggle but does not show separate monthly and annual prices, so the billing basis of the listed amounts is unclear, and Pro and Advanced both read $600 a month. Prices are in USD and exclude taxes. Confirm on the live pricing page.
Details checked October 2026 against the vendor's own pages. Prices and limits change, so confirm before you buy. Official pricing page ↗
Sources
This profile was compiled from these public pages. We have not run hands-on tests.
Aikido Security — at a glance
Aikido is an application security platform that scans code, dependencies, secrets, containers, cloud settings, infrastructure as code and web apps, and also sells AI-driven pentests. The vendor's pages say AI is used for AutoFix, AutoTriage, AI code analysis, deep pull request review, pentesting and an assistant called Aikido Agent; it runs as a web app with IDE, CI/CD, git and cloud integrations.
Try Aikido Security →