#43 - Aikido Infinite (Continuous Pentesting), VM Reachability Diagrams & IDE full scan

4 Mar 2026

Features

• Aikido Infinite (Continuous Pentesting): Automatically re-(pen)test your app after every code change. It focuses a Pentest on what actually changed and validates exploitability, so you get fewer false positives and faster fixes.

• Reachability diagrams for Cloud VM’s: See whether a finding is actually exploitable by visualizing how it is reachable in your cloud environment, including the network path, entry points, and exposed ports.

• Full Workspace Scan everywhere + IaC scanning in VS Code: Full Workspace Scan is now available across IDEs (VS Code, Jetbrains, Visual Studio, Eclipse, Cursor, ..), with IaC scanning for VS Code.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #158 new vulnerabilities over the last two weeks! We published the State of AI Security Development 2026 report, with fresh data on how teams are using AI and what it’s changing for AppSec.

Improvements

• General - Github now supports ignoring security issues and code quality from within the PR

• Intel - Added package health for PHP and Malware detection for skills.sh, Go, Rust, and Wordpress plugins

• Autofix - ELS libraries for .NET

• Container - Include/exclude images by pattern

• Cloud - Kubernetes images scanning now supports multiple tags of an image for the same cluster

• AI Pentest - File upload support for agent browser

• AI Pentest - SMS based two-factor authentication, OAuth Password Grant

• Code Quality - Autofix will suggest Code Quality fixes

• Zen

  • Release of Go beta, and Ruby got it first full release

  • IDOR blocking in NodeJS

  • Releases for Dotnet, Java, Python, PHP, Ruby, Golang and Node

• Integrations - Jira now has support for setting Custom Fields

• Integrations - Updated Slack alerts with direct actions from Slack and improved detail view

• Integrations - Added Comp AI for Governance, Risk, and Compliance

• API - Save pull request config for Azure, Bitbucket and Github

• API - Adjust group severity

• API - Add subdomains to attack surface domains