New - Protect Company Devices From Supply Chain Attacks 🚀

6 May 2026

Device Protection is an agent that covers the full install surface of your developers and others their devices: malware blocking, extension governance, group-based policies, and a request-and-approval workflow. Designed for security while keeping developers productive.

What's included

Real-time malware blocking powered by Aikido Intel, across npm, PyPI, Maven, NuGet...

Extension governance for VS Code, OpenVSX, Chrome, and skills.sh

Request and approval workflow: blocked installs trigger a one-click exception request reviewed inside Aikido

Group-based policies: set different rules per team

Continuous device inventory: always-current view of every package and extension per device

Developer Experience

The agent runs silently in the background. For the vast majority of installs, nothing happens and packages install as normal. Developers only see a notification when something is blocked or held for approval:

Malware block: A desktop notification shows the package name and flags it as malicious.

Policy block: A notification explains the package is restricted by your organization's policy. Developers can open the dashboard for details, but only an admin can change the policy.

Approval required: If your policy requires approval for new packages, the install is paused and a request goes to the admin Inbox.

→ More information