Home / Security / Aikido Security / Subscriptions
Aikido Security subscription
Aikido
—
No offers yet
Nobody has listed this product yet. We do not invent prices: a displayed price is a public offer, and it only ever comes from a live seller.
Plans
Basic
- Security review on every pull request
- Code quality checks in pull requests
- Findings pushed to Jira, Linear and other trackers
- Sync to compliance platforms such as Drata and Vanta
- Reports and analytics, plus bot and malicious request protection
- Billed per developer, purchasable self-serve or through cloud marketplaces
Pro
- Everything in Basic plus on-prem scanning without shipping code outside
- Virtual machine scanning and external attack surface monitoring
- Malware detection in your dependencies
- CVE-free base images and same-day support
- A monthly credit allowance for offensive testing, deep pull request review and whole-codebase analysis
- Unlimited AI-generated fixes
Advanced
- Everything in Pro for organizations with stricter requirements
- Broker for internal applications and a private package registry proxy
- Higher API rate limits and FIPS-grade base images
- Priority support in Slack or Microsoft Teams
- FedRAMP authorization
- A larger monthly credit allowance for the AI features
Enterprise
- Modules taken separately: code, cloud, offensive testing, runtime defence
- Multi-tenant portal for groups of companies and agencies
- Deployment inside your own perimeter
- Training, onboarding and a dedicated success manager
- Continuous penetration testing on every release rather than once a year
- Scope and module mix agreed under a contract
Plan contents as published by the vendor; seller prices arrive at launch.
What you get
An Aikido subscription is issued to a work email and lives inside an organization: connected repositories, cloud accounts, findings and accepted exceptions stay with you. Check how many developers the plan is sized for and what limits come with it — the number of repositories, container images, domains and cloud accounts differs by plan and determines what you can connect at all. Ask separately about the monthly credit allowance: offensive testing, deep pull request review and whole-codebase analysis all draw on it. The seller names the next charge date at delivery.
About the service
One service instead of a shelf of separate tools: dependency analysis, flaws in your own code, leaked secrets, container image scanning, infrastructure-as-code and cloud misconfiguration checks. The AI works in the two places where it pays off most: it filters out false positives in code analysis on its own and offers a ready fix you can accept as a pull request without unpicking the rule by hand. A separate offensive line has agents run a penetration test against the application and its interfaces, finding broken access control, business-logic flaws and prompt injection, and producing a report that SOC 2 and ISO 27001 auditors accept. Scanning is embedded in the IDE, in pull requests and in the build pipeline, while deep whole-repository analysis and offensive testing are metered as credits inside your plan. A solid pick for a team that would rather not keep five subscriptions and stitch their reports together by hand.
The same from another vendor