Aikido

Skip to main content

Aikido

Docs
Changelog
Aikido Login

Skip navigation

Overview Aikido Docs

Getting Started

Aikido never stores your code

Aikido Security Checks

Improve risk scoring for repositories and containers

SAST by Aikido: supported languages and security focus

Reachability engine to remove false positives

Scanning Frequencies

Running a successful POC with Aikido

Create Account and Connect Your Repositories

Account Setup with Multiple Gits

Link and merge multiple login types (GitHub, GitLab, etc)

Managing User Access with Teams

Manage and View your Apps and Projects via our Teams Feature

Assign Team Responsibilities by Specific Path in Repo

Inviting Users to Aikido

GitHub Integration for Authentication and User Management

Bitbucket Cloud Integration for Authentication and User Management

Azure DevOps Integration for Authentication and User Management

GitLab Integration for Authentication and User Management

GitLab Self-Managed Integration for Authentication and User Management

Invite Users to Aikido Without a Git Account

Setting Roles and Permissions

SAML user rights: Access Profiles (Recommended)

SAML user rights using custom attributes (Advanced)

Okta: Login with SAML

JumpCloud: Login with SAML

Google Workspaces: Login with SAML

Microsoft Azure: Login with SAML / Entra ID

Microsoft Azure: Custom attributes with SAML / Entra ID

Main Feed

Manually Adjust Issue Severity

Ignore Issues to Remove Issues from Main Feed

Snooze Issues for Later

Enable SLAs in Aikido

Add Custom SAST & IaC Rules

Enhancing Security with Access Control Checks

Display License Issues in Feed

Generate SBOM based on open-source packages

Change Email for Receiving Notifications

Limit Aikido access to specific IPs

Why Was an Issue Marked as Solved

Connect GitHub Account to Aikido

Connect Bitbucket Account to Aikido

Connect Azure DevOps Projects to Aikido

Connect GitLab account to Aikido

Connect GitLab Self Managed Server to Aikido

How to scan a personal GitLab project

Support for dependency scanning by language

Vulnerability scanning on private packages - Maven

C/C++ Lockfile-less Scanning

.NET Projects: Security scanning best practices

Java/Scala/Kotlin projects using Gradle: Security scanning best practices

Scala: Dependency Management and Scanning for build.sbt

Scanned Branches in Aikido

Ensuring Aikido Scans New Repositories

Support for Specific Branch Scanning

Support for Multi-Branch Scanning

Split Your Monorepo Per Path

Live Secret Detection

Ignoring secrets via code comments

Use EPSS values to further reduce noise

Account Creation for Local Scanning on Aikido

CLI options for Local Scanner

PR and release gating for code using Local Scanner

Performing Nightly Scans using the Aikido Local Scanner

Local Scanning in existing SCM-Integrated Workspaces

GitLab Self Managed Setup for Local Code Scanning

Azure DevOps Server Setup for Local Code Scanning

Mac Setup for Local Code Scanning

Windows Setup for Local Code Scanning

Linux Setup for Local Code Scanning

Jenkins Setup for Local Code Scanning

CircleCI Setup for Local Code Scanning

GitHub Action Setup for Local Code Scanning

Bitbucket Pipeline Setup for Local Code Scanning

TeamCity Pipeline Setup for Local Code Scanning

Bamboo Setup for Local Code Scanning

Malware detection in open-source dependencies

Allowing IP addresses for code & container scanning

Why does Aikido not find a specific vulnerability or CVE inside a dependency?

Scanning Dev Dependencies for CVEs

Ignore via code with .aikido files

Connect AWS account to Aikido

Connect Azure Cloud account to Aikido

Get required values + set up configuration to connect Azure cloud via public API

Connect GCP account to Aikido

Connect DigitalOcean account to Aikido

Cloud Search: Querying the Asset Graph

Virtual Machines

AWS EC2 Virtual Machine Scanning Setup

AWS EC2 KMS (Key Management Service) support

Azure Virtual Machine Scanning Setup

Setup Configuration in Azure

Setup Custom Role in Azure

Denoise VM results by configuring your environments

Setting up the Local VM Scanner

Container Image Scanning

Aikido Scanner for AWS ECR

Aikido Scanner for GCP Artifact Registry

GCP Scanner for GCP Artifact Registry

Image scanning for GCP legacy Container Registry

Image scanning for Azure Container Registry

Image scanning for DigitalOcean Container Registry

Cloudsmith Container Registry

Docker Hub images

GitHub Container Registry

Gitlab Container Registry

Scaleway Container Registry

Gitlab Self Managed Container Registry

Harbor Container Registry

JFrog Artifactory

Quay.io Cloud Registry

Image scanning for Sonatype Nexus Repository

Setting up image scanning with Local Scanner

Setting up kaniko image scanning with Local Scanner

PR and release gating using Local Image Scanner

CircleCI Setup for Local Image Scanning

GitLab Setup for Local Image Scanning

Jenkins setup for Local Image Scanning

BitBucket Pipeline setup for Local Image Scanning

GitHub Action Setup for Local Image Scanning

Link containers to code repositories in bulk via tags (AWS ECR only)

Limit image scanning to images with specific tags

Detecting outdated runtimes using Aikido

Export RAW SBOM of your containers

Link Repository to Container

Surface Monitoring/DAST

Scan Front-End App domains with Aikido

Scan Hosted 3rd party apps & services with Aikido

REST API Scanning

GraphQL API Scanning

Authenticated Scanning for Front-End Apps

Authenticated API Scanning for REST/GraphQL

Understanding and Detecting IDOR Vulnerabilities

Allowing IP addresses for DAST & Surface monitoring

CI Integrations

Aikido CI Gating Functionality

CI Scan History Overview

AutoFix suggestions and Inline Commenting for PR Checks

GitHub CI: PR Gating via Aikido Dashboard

GitHub CI: PR Gating via GitHub Actions in code

GitHub Action Setup for Aikido CLI: Release Gating

Azure Pipelines CI: PR Gating via Aikido Dashboard

Azure Pipelines CI: PR Gating via Aikido Dashboard with a Personal Access Token

Azure Pipelines: Setting up gating for pull requests via code

GitLab CI: MR Gating via Aikido Dashboard

GitLab CI: Setting up gating for merge requests via GitLab CI actions in code

Gitlab (Server) CI: MR Gating via Aikido Dashboard with a Personal Access Token (PAT)

Bitbucket CI: PR Gating via Aikido Dashboard

Bitbucket Pipes: Setting up gating for pull requests via Code

Aikido CLI: Release and PR Gating

Aikido CI API

Miscellaneous Integrations

Slack notifications

Send alerts to multiple Slack channels

MS Teams notifications

Jira Cloud

Jira Data Center

Troubleshoot Jira Task Creation: Set up Default Issue Types

Linear

JetBrains YouTrack

ClickUp

GitHub Issues

GitLab Issues

Monday.com

Azure DevOps Boards

Asana

Shortcut

Link Existing Tasks

Smart Issue Routing: Map Repositories to Projects in your Task Manager

How to connect your Sonarcloud account to Aikido

Show extra SonarCloud issues in feed by enabling unmapped rules

SonarQube Self-Managed

Aikido Webhooks

Aikido - Forge Integration: Troubleshooting

Allowing IP addresses for Issue/Task Tracker integrations

AutoFix for Open Source Dependencies

AI AutoFix for SAST and IaC Issues

AI AutoFix for Containers

Automatic Creation of Pull Requests

AutoFix for GitHub, BitBucket, GitLab Cloud

AutoFix for GitLab Self Managed

AutoFix for Gitlab Cloud with Personal Access Token

AutoFix for Azure DevOps

AutoFix for Azure DevOps with Personal Access Token

GitHub Registry - Private packages

Google Artifact Registry - Private packages

NuGet - Private packages

Composer - Private packages

Custom config - Private packages

GitLab Registry - Private packages

Poetry - Private packages

AWS CodeArtifact - Private packages

NPM - Private Packages

Go - Private Packages

Required permissions for Aikido AutoFix Github App

VS Code Plugin

Visual Studio Plugin

JetBrains IDE Plugins

Cursor IDE

Windsurf IDE

Aikido Malware Scanning

JetBrains Plugin - Access token not stored

Zen Firewall by Aikido

Getting Started with Zen Firewall

Creating an Aikido Zen Firewall Token

Setup and Installation of Zen Firewall for Node.js (Javascript & Typescript)

Setup and Installation of Zen Firewall for PHP

Setup and Installation of Zen Firewall for Python

Setup and Installation of Zen Firewall for Java

Setup and Installation of Zen Firewall for Dotnet

Configuration via environment variables

Proxy & Load balancer settings

Blocking vs Detection Mode in Zen Firewall

Setting Up Rate Limiting for Endpoints

Monitor Outbound Domains

Blocking Users with Zen Firewall

Blocking Tor traffic with Zen Firewall

Blocking Bot traffic with Zen Firewall

Blocking known threat actors with Zen Firewall

Blocking traffic by country with Zen Firewall

Understanding Your Zen Statistics

How Zen Works: Performance & Reliability

Bot Protection Details

ISO 27001 and SOC 2 Compliance

Vanta Compliance integration

Drata Compliance integration

Sprinto Compliance integration

Thoropass Compliance integration