Aikido

Skip to main content

Aikido

Docs
Changelog
Aikido Login

Skip navigation

Overview Aikido Docs

Getting Started with Aikido Security

Aikido never stores your code

Aikido Security Checks

Improve risk scoring for repositories and containers

SAST by Aikido: supported languages and security focus

Reachability engine to remove false positives

Scanning Frequencies

Running a successful POC with Aikido

Create Account and Connect Your Repositories

Account Setup with Multiple Gits

Link and merge multiple login types (GitHub, GitLab, etc)

Managing access with teams

Assign Team Responsibilities by Specific Path in Repo

Inviting Users to Aikido

GitHub Integration for Authentication and User Management

BitBucket Cloud Integration for Authentication and User Management

Azure DevOps Integration for Authentication and User Management

GitLab Integration for Authentication and User Management

GitLab Self-Managed Integration for Authentication and User Management

Invite Users to Aikido Without a Git Account

Setting Roles and Permissions

SAML user rights using custom attributes

Okta: Login with SAML

JumpCloud: Login with SAML

Google Workspaces: Login with SAML

Microsoft Azure: Login with SAML / Entra ID

Main Feed

Manually Adjust Issue Severity

Ignore Issues to Remove Issues from Main Feed

Snooze Issues for Later

Enable SLAs in Aikido

Add Custom SAST Rules

Enhancing Security with Access Control Checks

Generate SBOM based on open-source packages

Change Email for Receiving Notifications

Setting up code scanning

Connect GitHub Account to Aikido

Connect Bitbucket Account to Aikido

Connect Azure DevOps Projects to Aikido

Connect GitLab account to Aikido

Connect GitLab Self Managed Server to Aikido

How to scan a personal GitLab project

Support for dependency scanning by language

Vulnerability scanning on private packages - Maven

C/C++ Lockfile-less Scanning

.NET Projects: Security scanning best practices

Java/Scala/Kotlin projects using Gradle: Security scanning best practices

Scanned Branches in Aikido

Ensuring Aikido Scans New Repositories

Support for Specific Branch Scanning

Support for Multi-Branch Scanning

Split Your Monorepo Per Path

Live Secret Detection

Account Creation for Local Scanning on Aikido

CLI options for Local Scanner

PR and release gating using Local Scanner

Performing Nightly Scans using the Aikido Local Scanner

GitLab Self Managed Setup for Local Scanner

Azure DevOps Server Setup for Local Scanner

Mac Setup for Local Scanner

Windows Setup for Local Scanner

Linux Setup for Local Scanner

Jenkins Setup for Local Scanner

CircleCI Setup for Local Scanner

GitHub Action Setup for Local Scanner

Bitbucket Pipeline Setup for Local Scanner

Malware detection in open-source dependencies

Allowing IP addresses for code & container scanning

Why does Aikido not find a specific vulnerability or CVE inside a dependency?

Scanning Dev Dependencies for CVEs

Setting up cloud scanning

Connect AWS account to Aikido

Connect Azure Cloud account to Aikido

Get required values + set up configuration to connect Azure cloud via public API

Connect GCP account to Aikido

Connect DigitalOcean account to Aikido

Setting Up Virtual Machines

AWS EC2 Virtual Machine Scanning Setup

Azure Virtual Machine Scanning Setup

Setup Configuration in Azure

Setup Custom Role in Azure

Setting up container image scanning

Aikido Scanner for AWS ECR

AWS Inspector for AWS ECR

Aikido Scanner for GCP Artifact Registry

GPC Scanner for GCP Artifact Registry

Image scanning for GCP legacy Container Registry

Image scanning for Azure Container Registry

Image scanning for DigitalOcean Container Registry

Cloudsmith Container Registry

Docker Hub images

GitHub Container Registry

Gitlab Container Registry

Scaleway Container Registry

Gitlab Self Managed Container Registry

Harbor Container Registry

JFrog Artifactory

Quay.io Cloud Registry

Image scanning for Sonatype Nexus Repository

Setting up image scanning with Local Scanner

Setting up kaniko image scanning with Local Scanner

Link containers to code repositories in bulk

Limit image scanning to images with specific tags

Detecting outdated runtimes using Aikido

Export RAW SBOM of your containers

Setting up surface monitoring (DAST)

Scan domains with ZAP

Scan 3rd party applications that you host with Nuclei

Allowing IP addresses for DAST & Surface monitoring

Authenticated Domain Scanning

REST API Scanning

GraphQL API SCanning

Setting up integrations

Slack notifications

Send alerts to multiple Slack channels

MS Teams notifications

Jira Cloud

Jira Data Center

Set up Default Issue Types in Aikido to eliminate JIRA sync errors.

Linear

JetBrains YouTrack

ClickUp

GitHub Issues

GitLab Issues

Monday.com

Azure DevOps Boards

Asana

Shortcut

Link Existing Tasks

Smart Issue Routing: Map Repositories to Projects in your Task Manager

How to connect your Sonarcloud account to Aikido

Show extra SonarCloud issues in feed by enabling unmapped rules

SonarQube Self-Managed

Aikido Webhooks

Aikido - Forge Integration: Troubleshooting

Setting up CI Integrations

Aikido CI Gating Functionality

CI Scan History Overview

GitHub CI: PR Gating via Aikido Dashboard

GitHub CI: PR Gating via GitHub Actions in code

Azure Pipelines CI: PR Gating via Aikido Dashboard

GitLab CI: Setting up gating for merge requests

Bitbucket Pipes: Setting up gating for pull requests

Aikido CLI: Release and PR Gating

Aikido CI API

Autofix for 3rd Party Dependencies

Automatic Creation of Pull Requests

Autofix for GitHub, BitBucket, GitLab Cloud

Autofix for GitLab Self Managed

Autofix for Azure DevOps

GitHub Registry - Private packages

NuGet - Private packages

Composer - Private packages

Google Artifact Registry - Private packages

Custom config - Private packages

Visual Studio Code Plugin

JetBrains IDE Plugins

Getting Started with Zen

Setup and Installation of Zen for NodeJS

Setting Up Rate Limiting for Endpoints

Block Users with Zen

Monitor Outbound Domains

Proxy settings

Configuration via env vars

ISO 27001 and SOC 2 Compliance

Vanta Compliance integration

Drata Compliance integration

Sprinto Compliance integration