Aikido Security

All-in-one code, cloud and runtime security for developer teams

Security & Safety Freemium Has API
Researched · Published · Reviewed
RECATOOLS Score
8.4 / 10
Capability
9
Value for money
8.5
Ease of use
9
ASEAN readiness
7.5
API quality
7.5
Founded
2022
HQ
Ghent, Belgium
Users
100,000+ teams globally (as of early 2026)
Launched
Founded Oct 2022 (Ghent, Belgium)
Developer
Willem Delbare (CEO/CTO), Roeland Delrue (COO), Felix Garriau (CMO)

Overview

Aikido Security is a Ghent-based application-security platform that combines dependency scanning, SAST, secrets detection, infrastructure-as-code, container and cloud scanning, DAST, AI pentesting and runtime protection in one dashboard, with AI triage and AutoFix pull requests. It raised a $60 million Series B at a $1 billion valuation in January 2026 and acquired the patching company Root in June 2026. A free plan covers two users.

Advertisement

Pricing

Pricing shown for reference only. These figures reflect RECATOOLS research as of 14 Oct 2026 and may be out of date or incomplete. This is not financial or purchasing advice — always confirm the current price on the provider’s official website before making any decision.

Developer
$0
Free forever, 2 users
  • SCA, SAST and AI SAST, secrets detection
  • Cloud misconfiguration, container and IaC scanning, DAST
  • IDE plugins; rescans every 3 days
  • 10 repos, 10 AI AutoFixes a month
Basic
$350/mo
Total fee incl. 10 users, monthly billing ($3,780/yr annually)
  • PR security review
  • Sync to Jira, Linear, Drata and Vanta
  • AI and bot protection, device protection
  • 100 repos, unlimited AI AutoFixes
Advanced
$1,050/mo
Total fee incl. 10 users, monthly billing ($11,340/yr annually)
  • Broker for internal apps
  • Private registry proxy
  • FIPS base images
  • Priority support in Slack or MS Teams; 200 AI credits a month
Enterprise
Quoted on request
Tailored pricing
  • Enterprise-grade modules
  • FedRAMP Moderate
Pentest
$4,000 per assessment
Typical fixed-scope AI pentest; rightsized pentests $50 to $30,000+
  • PDF report for SOC 2 and ISO 27001
  • Free re-testing for 6 months
  • No high or critical finding, no charge

Use cases

Startups and scale-ups wanting full-stack security coverage without hiring a dedicated security team Engineering teams migrating from multiple point tools to a single consolidated ASPM platform DevSecOps teams needing automated vulnerability triage and AI-generated fix PRs to reduce developer toil Cloud-native SaaS companies requiring combined SAST, container, and CSPM posture management under one dashboard Platform engineers embedding runtime attack protection (Zen firewall) directly into Node, Python, PHP, or Java services

What you can produce with Aikido Security

  • One vulnerability dashboard spanning code, dependencies, containers, cloud accounts and running apps
  • AI AutoFix pull requests for SAST, dependency and IaC findings
  • Findings filtered by reachability and AI triage so unreachable issues drop out of the queue
  • An AI pentest report usable as SOC 2 and ISO 27001 evidence, with free re-tests for six months
  • Patched drop-in replacement libraries and container images for vulnerable versions you cannot upgrade
  • Malware blocked during package installs with the open-source Safe Chain
  • Runtime injection attacks blocked in-app with the open-source Zen firewall
Advertisement

ASEAN Perspective

Aikido Security in Southeast Asia

Aikido Security has established a physical APAC presence in Singapore (109 North Bridge Rd) with a dedicated Revenue Lead APAC role and stated focus markets of Singapore, Hong Kong, South Korea, and Japan. The flat-rate unlimited-user pricing is well-suited to the lean engineering teams common in ASEAN startups. However, APAC-specific compliance guidance (MAS TRM, PDPA, OJK) is not yet prominently documented on the platform, and the regional partner ecosystem is still in early build-out as of mid-2026 — teams in regulated sectors should engage the Singapore office directly to assess fit.

RECATOOLS Verdict

Aikido is one of the most practical all-in-one AppSec platforms for startups and mid-sized teams: a genuinely usable free plan, prices published openly, and a single dashboard that replaces several separate scanners. The Root acquisition adds patched drop-in libraries and container images, useful where upgrading a dependency is riskier than patching it.

The trade-offs are depth and the jump from free to $350 a month. Teams with heavy Snyk or Checkmarx investment should compare specialist features before switching, and the noise-reduction numbers are Aikido's own. An APAC headquarters in Singapore makes it easier to buy from in the region.

Desk research by RECATOOLS from public sources, written with AI assistance — not a hands-on test. How we review

What we found

Aikido Security is a Ghent application-security company whose pitch is consolidation: one platform for dependency scanning, SAST, secrets, infrastructure-as-code, containers, cloud posture, DAST and runtime protection, connected to a team's repositories and cloud accounts. Its about page lists 2022 as its first year, $85 million raised, more than 350 staff and over 150,000 teams protected, with an APAC headquarters in Singapore. In January 2026 it raised a $60 million Series B at a $1 billion valuation; SecurityWeek reported DST Global as lead, with PSG Equity, Notion Capital and Singular joining. Aikido calls itself the fastest European cybersecurity company to reach unicorn status, which is its own claim.

On 30 June 2026 Aikido announced it had acquired Root, whose agents write patches for the exact open-source package versions teams run. That became Aikido Libraries and Aikido Images, drop-in libraries and container images patched in place, now listed on the paid plans. Aikido also maintains open-source projects including the Zen in-app firewall, the Opengrep code-analysis engine and Safe Chain, which blocks malware during package installs.

Pricing is published. The free Developer plan covers two users, 10 repos, one cloud account, 10 AI AutoFixes a month and rescans every three days. Paid plans include ten users: Basic $350, Pro $700 and Advanced $1,050 a month on monthly billing, or 10% less paid annually ($3,780, $7,560 and $11,340 a year). Pro adds on-prem scanning, VM scanning, attack-surface monitoring, malware detection and 100 AI credits a month; API fuzzing, which earlier versions of this page listed under Pro, is not on the pricing page. Enterprise is quoted and includes FedRAMP Moderate. AI pentests are sold separately, typically $4,000 per assessment.

The noise-reduction figures are vendor numbers: the homepage claims 99% fewer false positives and a quoted customer cites 92%. Review-site ratings in older versions of this page could not be confirmed and have been removed. Startups can apply for up to 30% off.

Compiled by RECATOOLS from public sources: vendor documentation and pricing, code repositories and published reporting.

Notable facts

  • Aikido reached unicorn status ($1B valuation) in just over three years from founding — the fastest European cybersecurity company to do so.
  • The company is named after the Japanese martial art aikido, reflecting a philosophy of redirecting attacker energy rather than brute-force blocking.
  • Aikido co-founded Opengrep in January 2025, uniting 10 rival security companies to fork Semgrep and keep a core SAST engine truly open source.
  • Revolut founder Nik Storonsky personally invested in Aikido's Series B — while Revolut itself is also a paying customer.

Frequently asked questions

No. Aikido explicitly states it does not store your code after completing analysis — scanning runs in temporary environments that are automatically destroyed post-scan.
Yes. The free tier covers 10 repositories, 2 container images, and 1 cloud account with no credit card required. Startups with under $1.5M funding and fewer than 10 team members qualify for up to 30% discounts on paid plans.
It depends on your needs. Aikido covers more surface area (SAST + SCA + IaC + DAST + CSPM + runtime) out of the box, but Snyk offers a deeper proprietary CVE database and Semgrep gives more customisable rule control. Aikido is best when you want consolidated coverage with minimal operational overhead.

About this listing

Researched on
Published on
Last reviewed

This entry was compiled from publicly available data including Aikido Security's official website, press releases, documentation, and reputable third-party publications. RECATOOLS is not affiliated with Aikido Security unless explicitly stated.

Data accuracy

Third-party AI tools update their pricing, features, availability, and policies frequently. Information here may be outdated by the time you read this — we make reasonable efforts to keep listings current, but cannot guarantee absolute accuracy.

For the latest details, please refer to Aikido Security directly →

Spotted something out of date? Suggest an update →

Advertisement