# #58 - Cloud Security Audits, External Network Pentesting and Aikido is now FedRAMP Moderate

### Features

* [**Cloud Security Audit**](https://help.aikido.dev/ai-code-analysis/cloud-security-audit) **-** AI agents reason across your cloud and IaC to find which misconfigurations combine into a real attack path, then visualize the full chain. Each finding points to the template that caused it, so you know exactly what to fix.
* [**External Network Pentests**](https://help.aikido.dev/pentests/configure-a-pentest/network-pentesting)**:** Pentest everything you expose to the internet, from forgotten subdomains to open admin panels. Every finding is confirmed with evidence, so your team only spends time on real exposures.
* [**FedRAMP Moderate**](https://www.aikido.dev/blog/aikido-fedramp-moderate-authorization) **-** Aikido for Government is now on the [FedRAMP Marketplace](https://www.fedramp.gov/marketplace/products/F1206111371/). Federal agencies can adopt Aikido without starting a security review from scratch.

### **Aikido Intel & News**

Our research team has discovered more than [#376 new vulnerabilities](https://intel.aikido.dev) over the last two weeks!

<figure><img src="https://help.aikidogov.us/_assets/1df3fb8c4f3d/image-3.png" alt=""><figcaption></figcaption></figure>

[Aikido launches Noon](https://www.aikido.dev/blog/noon-workforce-security): Our new workforce security business protects every employee with email security, device protection, AI governance and realistic phishing and deepfake training.

### Improvements

* AI Code Analysis - [Smart Contract Audit](https://help.aikido.dev/ai-code-analysis/smart-contract-audit)
* Pentest - Aikido is now [a CREST member](https://marketplace.crest.org/supplier/aikido-security/). Get your human-led and CREST-accredited pentest through Aikido.
* Code Quality
  * [Removed restriction on maximum number of rules](https://help.aikido.dev/code-quality/code-quality-overview)
  * [Auto create PR’s for code quality issues found in full repository scans](https://help.aikido.dev/code-quality/repository-scans/understand-repository-scan-results#fix-findings-with-autofix)
* Device Protection - [Add support to Firewall for allowlisting custom domains](https://help.aikido.dev/aikido-device-protection/using-aikido-endpoint/firewall)
* [Terraform](https://help.aikido.dev/miscellaneous-integrations/aikido-terraform-provider)
  * Added [Container management resources](https://registry.terraform.io/providers/AikidoTerraform/aikido/latest/docs/resources/container)
  * Now available on the [OpenTofu registry](https://search.opentofu.org/provider/aikidoterraform/aikido/latest)
* Integrations - [SIEM](https://help.aikido.dev/miscellaneous-integrations/siem-connectors)
  * [Optionally transmit your Aikido Activity logs to your SIEM](https://help.aikido.dev/miscellaneous-integrations/siem-connectors/siem-field-reference)
  * New integration added: [Google SecOps](https://help.aikido.dev/miscellaneous-integrations/siem-connectors/google-secops)
* Intel - [Added Hugging Face to malware ecosystems](https://intel.aikido.dev/malware?ecosystem=huggingface)
* Zen Firewall - Agent releases for [Dotnet](https://github.com/AikidoSec/firewall-dotnet/releases), [Python](https://github.com/AikidoSec/firewall-python/releases), [PHP](https://github.com/AikidoSec/firewall-php/releases), [Ruby](https://github.com/AikidoSec/firewall-ruby/releases), and [Node](https://github.com/AikidoSec/firewall-node/releases)
* IDE - New releases for [VSCode](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido), [Jetbrains](https://plugins.jetbrains.com/plugin/24993-aikido-security/versions/stable), and [Visual Studio](https://marketplace.visualstudio.com/items?itemName=AikidoSecurity.aikido-visualstudio)
* API - [List](https://apidocs.aikido.dev/reference/listcodequalityfindingsforpullrequest) and [Ignore](https://apidocs.aikido.dev/reference/ignorecodequalityrepofinding) code quality finding
* API - [List CWE descriptions](https://apidocs.aikido.dev/reference/listcwedescriptions)
* API - [List pending invites](https://apidocs.aikido.dev/reference/listpendinginvites)
* API - [List AI code analysis assessments](https://apidocs.aikido.dev/reference/listcodeaudits)
* API - [List pentest assessments](https://apidocs.aikido.dev/reference/listpentestassessments)
* API - [Disable user](https://apidocs.aikido.dev/reference/disableuser)
* API - [Remove attach surface subdomain](https://apidocs.aikido.dev/reference/removesubdomain)