Aikido AI Pentest

What do you like best about the product?

Repository scans and the automatic integration with our ticketing service. The scans run continuously across our codebases and surfaced a long backlog of small security issues that had gone unnoticed for years, the kind of thing that would normally take a dedicated audit to catch. The ticketing integration means findings land directly in our existing workflow as tickets instead of sitting in a separate dashboard nobody checks, which has saved us a lot of manual triage.

On top of that, it's genuinely easy to use. Setup was quick and the interface doesn't require a security background, so the whole team engages with it, not just the security-minded folks. And because scans run consistently across all our codebases, it's pushed us toward a shared security standard across projects that used to drift apart, an unexpected win we hadn't set out to get.

Their support has also stood out: quick to respond and genuinely hands on, not just pointing us to documentation but actually helping work through our specific setup.

What do you dislike about the product?

Honestly, nothing significant to flag yet. We're still a few months in and haven't explored every tool in the platform, so there may be gaps we haven't hit, but nothing has gotten in our way so far.

What problems is the product solving and how is that benefiting you?

Aikido is solving the problem of security debt we didn't know we had: small vulnerabilities and issues that had accumulated across our codebases over several years without anyone actively hunting for them. Before using it, that kind of continuous scanning just wasn't happening, so things slipped through unnoticed.

The benefit is twofold. First, we now have visibility we simply didn't have before, and a steady stream of concrete, actionable findings instead of periodic, manual audits. Second, because it scans consistently across all our different codebases, it's helping us enforce a shared security standard across projects that used to be handled inconsistently, which reduces risk without adding extra process overhead for the team.

What do you like best about the product?

I love how Aikido's reachability analysis filters out noise by showing which vulnerabilities are truly exploitable, saving us huge amounts of time and effort. Consolidating multiple tools into one platform has made our process much simpler, and the responsive support from the Aikido team is unmatched—they actually listen and help us fix issues quickly. The real gates now block critical and high findings before code merges or builds, giving us real confidence in our security posture.

What do you dislike about the product?

There isn't much to dislike so far, but we are still working on extending gates consistently across all stages of the pipeline and preparing to evaluate new features like AI pentesting and device protection. Some of these improvements are not live yet, so I'm looking forward to seeing how those work in practice.

What problems is the product solving and how is that benefiting you?

Aikido helps us focus on the things that matter. This is mainly done through CVE triage, PR gating, AI code review, and issue reachability.

What do you like best about the product?

I love that Aikido consolidated AppSec across all our global teams with no retraining needed. The self-serve onboarding at aikido.dev meant we could start immediately, and the IDE plugin lets our developers fix issues in place. Our patch rate doubled, container scanning is unified with code-level findings, and we can check new CVEs instantly. Security is now part of shipping code, not just a backlog item.

What do you dislike about the product?

There’s little to dislike, but I would appreciate even broader DAST coverage as we continue to expand our use. Integrating all possible security checks into one platform is an ongoing goal, and I look forward to seeing even more features in the future.

What problems is the product solving and how is that benefiting you?

Security coverage for compliance.

What do you like best about the product?

What I really appreciate about Aikido Security is how it cuts through the noise and only presents the vulnerabilities and issues that genuinely need attention. This saves my team an enormous amount of time and helps us focus on what truly matters. The seamless integration between CLI and web app, the responsive and human support, and features like AutoFix and Safe Chain have all made a tangible difference. The platform's ability to consolidate visibility across our SDLC, its fast adoption of new features (like vcpkg support), and the ease of onboarding were also standout positives.

What do you dislike about the product?

Honestly, there isn't much to dislike. If I had to mention anything, it's just that we're still exploring some modules, like code quality, and haven't fully replaced all our legacy tools yet. There might be some learning curve as we transition more functionality to Aikido, but so far, nothing has been a real negative.

What problems is the product solving and how is that benefiting you?

Aikido Security helps us proactively report on product health to the broader exec team. Having a single pane of glass that brings together reporting, DAST, SAST, SCA, and secrets all in one place is a big plus.

What do you like best about the product?

Aikido's pentest report was clear and actually useful. Instead of a wall of disconnected findings, it grouped issues by root cause so we could see the handful of structural fixes that mattered rather than chasing dozens of tickets. Each finding had a clear repro, severity score and a sensible fix recommendation, and the AI-assisted triage cut through the noise well. [Onboarding was quick and the dashboard is easy to navigate.
The retesting support makes it easy to gather evidence for compliance. For a small team without a dedicated security person, the ROI is obvious: one report gave us a realistic remediation roadmap in an afternoon.

What do you dislike about the product?

The full report is 200+ pages and could use a shorter executive summary up front.

What problems is the product solving and how is that benefiting you?

We're a small team building a CS platform so security and compliance matter but we don't have a dedicated security engineer. Aikido gives us that coverage without the headcount. It finds the auth gaps, rate-limiting holes and XSS risks we'd otherwise miss, and it gives us the evidence we need for customer DPAs and our security policy work. It's turned security from something we worried about into a prioritised list we can actually work through.

What do you like best about the product?

I find the easy interface of Aikido Security very pleasant, especially because it is clear for a non-programmer like me. It also helps me to build more easily and to be immediately aware of security leaks. Additionally, I mainly use the feed to see which new vulnerabilities have been found. The initial installation was also very easy; just connect and you're ready, and Claude can handle it very well, which has helped me a lot.

What do you dislike about the product?

I would like a tier for 1 person, even if it's slightly more expensive, 50 euros per month. Then I would take it immediately.

What problems is the product solving and how is that benefiting you?

I use Aikido Security to build more easily and to know immediately if there are security vulnerabilities. The interface is user-friendly, even for non-programmers. I mainly use the feed to discover new vulnerabilities.

What do you like best about the product?

First of all, the customer support is great. They walked me through my case from the start, and they were very generous with the trial and the follow-up. The SAST scanning and autofix were the first features I used, and they were amazing.

What do you dislike about the product?

At first, it felt like a lot all at once, and I got a bit overwhelmed by the number of notifications and all the features they offer. That said, their customer support more than made up for it and really helped smooth things out.

What problems is the product solving and how is that benefiting you?

As a solo developer and the first and last line of defence, I really appreciate how the scanning and autofixes come in small batches that are easy to double-check and merge. It gives me more peace of mind knowing there’s someone or something else also double-checking my work.

What do you like best about the product?

Comprehensive tools, good ui, CVE details

What do you dislike about the product?

Report section is not customizable. End of life detection should be improved

What problems is the product solving and how is that benefiting you?

It is helping the company to be CRA compliant

What do you like best about the product?

All in one solution wiht DAST embeded included

What do you dislike about the product?

Base/free version does not show all entries and blur below top 10 findings

What problems is the product solving and how is that benefiting you?

If you look for SAST DAST one stop solution for your software

What do you like best about the product?

Peace of mind knowing I’ve got a jump on attackers, and the confidence that I’ll discover the vulnerability before they do.

What do you dislike about the product?

Since I’m bootstrapping this operation, the Pro version is simply out of my budget.

What problems is the product solving and how is that benefiting you?

It helps me identify vulnerabilities and work with my dev team to patch them sooner rather than later.