#52 - DSPM, Aikido Libraries and Repository Code Quality scans

28 Jul 2026

Features

• Data Exposure Audit (DSPM) - Track how sensitive data flows and where it gets exposed, read entirely from your code. No database connections, no data access to grant, just point it at your repo and fix the exposures at the source.
• Aikido Libraries - Fix open-source CVEs on the exact version you already run. No major-version bumps, no breaking changes, no refactor to schedule, only a PR you merge.
• Code Quality Repository Scans - Find code quality issues that already exist in your repositories. Use them to find and prioritize technical debt, then keep track of your results as your code evolves.

Aikido Intel - Malware & Vulnerability Database

Our research team has discovered over #298 new vulnerabilities over the last two weeks!

We dug into wp2shell, the unauthenticated RCE in WordPress core, read the story here. Our Attack Surface scan detects it against your exposed assets automatically, so set it up to catch any unpatched WordPress in your estate

Improvements

• General - Aikido Inbox: Admins can review ignore and snooze requests from their team
• Cloud - Noise Reduction for Container Images
• General - Bitbucket server support for PR Checks
• Cloud - K8s registry option for public image scanning
• Pentest - Reduced pricing for tiny apps
• Code Quality - PR/MR Gating by Severity
• Code Quality - Auto Resolve findings on GitHub
• Code Quality - New rule: "Keep the diff minimal"
• Device Protection - Support for Jetbrains
• Zen Firewall - Agent releases for PHP, Ruby, Golang and Node
• IDE - New releases for VSCode, Jetbrains, and Visual Studio
• Intel - Health score for Maven ecosystem
• Settings - Bulk assignment of clouds to teams