Aikido for Government

Changelog Notifications API Aikido login

Docs Aikido for Government Changelog

English

日本語

Aikido Docs Overview

Getting Started

Setting Up Your Account
User Management
Manage Teams & Applications
Which Aikido product for what?
Manage Findings
Task Management Tools
Chat & Alerts
Reachability Analysis
- Introduction to Reachability Analysis
- Reachability Analysis Examples in Aikido

AI & Dev Tools

How Aikido Uses AI
Guide Agents with Repository Files
AGI Readiness
Securing AI-Generated Code
Secrets Pre-Commit Hook
IDE Plugins
AI Coding Assistants (MCP)

Deep Review

How Deep Review Works
Configure Deep Review
Linked Repositories
Deep Review Memory

Aikido Agent

Aikido Agent
Ask Aikido
CVE Exploitability Analysis
SAST AutoTriage
Secrets AutoTriage
Custom Reports Creation

AutoFix & Remediation

AutoFix Overview
Different AutoFix Types
Automation & Merging
Setting up AutoFix
Aikido Libraries
Aikido Images
Connect Private Packages
FAQ

AutoShip

AutoShip Overview
CI/CD
Monitoring
Smoke testing

Code Scanning

Code Scanning Overview
Connect Your Source Code
Local Code Scanning
Scanning Best Practices
Repository Configurations
Safe Chain: Prevent Malware Installs

Pentests

Pentest Overview
Pentest Pricing
What the Coverage Levels Mean
Prepare a Pentest
Configure a Pentest
Coverage and Findings
Continuous Pentesting
Integrate your Lovable Apps
Integrate your Supabase Projects

AI Code Analysis

AI Code Analysis
Guide Agents with Repository Files
Code Security Audit
Data Exposure Audit (DSPM)
- Run a Data Exposure Audit
- What Data Exposure Audit Finds
Cloud Security Audit
- Run a Cloud Security Audit
- What Cloud Security Audit Finds
Smart Contract Audit
- Run a Smart Contract Audit
- What Smart Contract Audit Finds

Cloud Scanning

Cloud Scanning Overview
Connect Your Cloud
Cloud Discovery: Search Asset Inventory
Cloud Inventory
Custom CSPM Rules
Kubernetes Cluster Scanning
- Kubernetes In-Cluster Image Scanning

Container Image Scanning

Container Image Scanning Overview
Cloud Provider Registries
Standalone Registries
Local Image Scanning
Configuration
Container Reachability Analysis

Virtual Machine Scanning

VM Scanning Overview
AWS Virtual Machine Scanning
Azure Virtual Machine Scanning Setup
Google Cloud Virtual Machine Scanning Setup
Local VM Scanning
- Setting Up the Local VM Scanner on Linux
- Setting Up the Local VM Scanner on Windows
Miscellaneous

Runtime Sensors

Runtime Sensors Overview

DAST / Surface Monitoring

DAST Overview
Quick Scan
- Scan Front-End App Domains with Aikido
- Authenticated Scanning for Front-End Apps
Attack Surface Monitoring
- Add or Ignore Subdomains in Attack Surface
- Reviewed Leaked Credentials and Passwords
API Scanning
Miscellaneous

PR & Release Gating

PR Gating Overview
GitHub PR Gating
Azure DevOps PR Gating
Azure DevOps PR Gating with an Entra Service Principal
GitLab MR Gating
- GitLab Premium, Ultimate & Server: MR Scans Setup
- GitLab Free: MR Scans Setup
Bitbucket PR Gating
- Bitbucket Free & Standard: PR Scans Setup
- Bitbucket Premium: PR Gating Setup
CLI for PR & Release Gating

Code Quality

Code Quality Overview
Code Quality Repository Scans
- Start a Repository Scan
- Understand Repository Scan Results
Code Quality in PRs
Code Coverage
- PR Gating on Code Coverage
- Monorepos That Test Only Changed Paths
Add Custom Code Rules
Add Extra Code Context
Guide Agents with Repository Files

Zen Firewall

Getting Started with Zen Firewall
Protect Your App with Zen Firewall
How Does Zen Work?
Installing Zen Firewall
Zen Features
Use-Cases
Miscellaneous Zen

Bug Bounty

Bug Bounty Overview
Setting Up a Bug Bounty Program
Validating a Bug Bounty Report

Aikido Device Protection

What is Device Protection
Deploying Device Protection
Using Device Protection
Miscellaneous Device Protection

Compliance and Reporting

Cyber Resilience Act (CRA) Compliance
SOC 2 and ISO 27001 Audit Evidence
Compliance Integrations Overview
Reports
Licenses and SBOM

Miscellaneous Integrations

Aikido Webhooks
Aikido Terraform Provider
SIEM Connectors
Forge Integration: Troubleshooting
Registry Proxy

Workflows & Guides

Overview
Migrating from SonarQube to Aikido
Fix Dependency Issues with AutoTriage and AutoFix
Linear and Slack
Jira Cloud and Slack
Additional Cloud Providers

Miscellaneous

Wallet & Credits
- Automatic Top-Ups
Security Acronyms
Setting Up Aikido Changelog Notifications in Slack & Teams
Using Bitbucket Projects as Workspaces
Using Azure Devops Projects as Workspaces
Aikido Broker for Internal Applications
Domain verification
IP Allowlisting for Your Git Provider

Docs
DAST / Surface Monitoring

Miscellaneous

Why We Flag Certain Issues the Way We Do for Domains & API's IP Addresses for Domain Scanning Using 2FA in Front-End and API Scans Run DAST Scans in CI/CD

PreviousMultiple OpenAPI Specs on the Same URL NextWhy We Flag Certain Issues the Way We Do for Domains & API's