> For the complete documentation index, see [llms.txt](https://help.aikido.dev/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://help.aikido.dev/changelog/q4-2026/58-cloud-security-audits-external-network-pentesting-and-aikido-is-now-fedramp-moderate.md).
# #58 - Cloud Security Audits, External Network Pentesting and Aikido is now FedRAMP Moderate
22 Oct 2026
### Features
* [**Cloud Security Audit**](https://help.aikido.dev/ai-code-analysis/cloud-security-audit) **-** AI agents reason across your cloud and IaC to find which misconfigurations combine into a real attack path, then visualize the full chain. Each finding points to the template that caused it, so you know exactly what to fix.
* [**External Network Pentests**](https://help.aikido.dev/pentests/configure-a-pentest/network-pentesting)**:** Pentest everything you expose to the internet, from forgotten subdomains to open admin panels. Every finding is confirmed with evidence, so your team only spends time on real exposures.
* [**FedRAMP Moderate**](https://www.aikido.dev/blog/aikido-fedramp-moderate-authorization) **-** Aikido for Government is now on the [FedRAMP Marketplace](https://www.fedramp.gov/marketplace/products/F1206111371/). Federal agencies can adopt Aikido without starting a security review from scratch.
### **Aikido Intel & News**
Our research team has discovered more than [#376 new vulnerabilities](https://intel.aikido.dev) over the last two weeks!
[Aikido launches Noon](https://www.aikido.dev/blog/noon-workforce-security): Our new workforce security business protects every employee with email security, device protection, AI governance and realistic phishing and deepfake training.
### Improvements
* AI Code Analysis - [Smart Contract Audit](https://help.aikido.dev/ai-code-analysis/smart-contract-audit)
* Pentest - Aikido is now [a CREST member](https://marketplace.crest.org/supplier/aikido-security/). Get your human-led and CREST-accredited pentest through Aikido.
* Code Quality
* [Removed restriction on maximum number of rules](https://help.aikido.dev/code-quality/code-quality-overview)
* [Auto create PR’s for code quality issues found in full repository scans](https://help.aikido.dev/code-quality/repository-scans/understand-repository-scan-results#fix-findings-with-autofix)
* Device Protection - [Add support to Firewall for allowlisting custom domains](https://help.aikido.dev/aikido-device-protection/using-aikido-endpoint/firewall)
* [Terraform](https://help.aikido.dev/miscellaneous-integrations/aikido-terraform-provider)
* Added [Container management resources](https://registry.terraform.io/providers/AikidoTerraform/aikido/latest/docs/resources/container)
* Now available on the [OpenTofu registry](https://search.opentofu.org/provider/aikidoterraform/aikido/latest)
* Integrations - [SIEM](https://help.aikido.dev/miscellaneous-integrations/siem-connectors)
* [Optionally transmit your Aikido Activity logs to your SIEM](https://help.aikido.dev/miscellaneous-integrations/siem-connectors/siem-field-reference)
* New integration added: [Google SecOps](https://help.aikido.dev/miscellaneous-integrations/siem-connectors/google-secops)
* Intel - [Added Hugging Face to malware ecosystems](https://intel.aikido.dev/malware?ecosystem=huggingface)
* Zen Firewall - Agent releases for [Dotnet](https://github.com/AikidoSec/firewall-dotnet/releases), [Python](https://github.com/AikidoSec/firewall-python/releases), [PHP](https://github.com/AikidoSec/firewall-php/releases), [Ruby](https://github.com/AikidoSec/firewall-ruby/releases), and [Node](https://github.com/AikidoSec/firewall-node/releases)
* IDE - New releases for [VSCode](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido), [Jetbrains](https://plugins.jetbrains.com/plugin/24993-aikido-security/versions/stable), and [Visual Studio](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido-visualstudio)
* API - [List](https://apidocs.aikido.dev/reference/listcodequalityfindingsforpullrequest) and [Ignore](https://apidocs.aikido.dev/reference/ignorecodequalityrepofinding) code quality finding
* API - [List CWE descriptions](https://apidocs.aikido.dev/reference/listcwedescriptions)
* API - [List pending invites](https://apidocs.aikido.dev/reference/listpendinginvites)
* API - [List AI code analysis assessments](https://apidocs.aikido.dev/reference/listcodeaudits)
* API - [List pentest assessments](https://apidocs.aikido.dev/reference/listpentestassessments)
* API - [Disable user](https://apidocs.aikido.dev/reference/disableuser)
* API - [Remove attach surface subdomain](https://apidocs.aikido.dev/reference/removesubdomain)
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://help.aikido.dev/changelog/q4-2026/58-cloud-security-audits-external-network-pentesting-and-aikido-is-now-fedramp-moderate.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
