#58 - Cloud Security Audits, External Network Pentesting and Aikido is now FedRAMP Moderate
22 Oct 2026
Features
- Cloud Security Audit - AI agents reason across your cloud and IaC to find which misconfigurations combine into a real attack path, then visualize the full chain. Each finding points to the template that caused it, so you know exactly what to fix.
- External Network Pentests: Pentest everything you expose to the internet, from forgotten subdomains to open admin panels. Every finding is confirmed with evidence, so your team only spends time on real exposures.
- FedRAMP Moderate - Aikido for Government is now on the FedRAMP Marketplace. Federal agencies can adopt Aikido without starting a security review from scratch.
Aikido Intel & News
Our research team has discovered more than #376 new vulnerabilities over the last two weeks!
Aikido launches Noon: Our new workforce security business protects every employee with email security, device protection, AI governance and realistic phishing and deepfake training.
Improvements
- AI Code Analysis - Smart Contract Audit
- Pentest - Aikido is now a CREST member. Get your human-led and CREST-accredited pentest through Aikido.
- Code Quality
- Device Protection - Add support to Firewall for allowlisting custom domains
- Terraform
- Added Container management resources
- Now available on the OpenTofu registry
- Integrations - SIEM
- Optionally transmit your Aikido Activity logs to your SIEM
- New integration added: Google SecOps
- Intel - Added Hugging Face to malware ecosystems
- Zen Firewall - Agent releases for Dotnet, Python, PHP, Ruby, and Node
- IDE - New releases for VSCode, Jetbrains, and Visual Studio
- API - List and Ignore code quality finding
- API - List CWE descriptions
- API - List pending invites
- API - List AI code analysis assessments
- API - List pentest assessments
- API - Disable user
- API - Remove attach surface subdomain