.avif)
Welcome to our blog.
Anthropic's Fever Dream: Claude's package that stole real keys
Anthropic disclosed that one of its own agents published live malware to PyPI and compromised a real third-party company in the process. I went looking, and I might have found the package it left behind.
The upgrade trap: when upgrading is the wrong answer to a CVE
"Upgrade to fix it" assumes that a fixed version exists, that it's shipped and that it won't break your app. Often none of these are true. This is the "upgrade trap," where both upgrading and not upgrading come with security risks and breaking prod. We look at what the way out looks like.
2026 State of AI in Pentesting
Our latest report captures the perspectives of 400 CISOs, CTOs, and senior engineering leaders across Europe and the US. It explores how AI is changing penetration testing, why traditional approaches are struggling to keep pace with modern software delivery, and what security leaders want from the next generation of penetration testing.
Vulnerabilities & Threats
Cut through the noise with real-world CVE breakdowns, malware analysis, exploits, and emerging risks.
Customer Stories
See how teams like yours are using Aikido to simplify security and ship with confidence.
Webhook security checklist: How to build secure webhooks
Building webhooks in your SaaS? Use this webhook security checklist to make sure you're taking the necessary steps to protect your app and user data.
The Cure For Security Alert Fatigue Syndrome
Aikido aims to cure Security Alert Fatigue Syndrome by reducing noise and false positives that waste developers' time. Learn how Aikido intelligently ignores irrelevant security alerts for you, adapts severity scores. This helps Aikido users to easily prioritize fixes for genuine threats. This win-win approach improves developer productivity and resolves security issues faster.
NIS2: Who is affected?
Is your B2B company in scope of the NIS2 Directive? Find out if you need to comply with NIS2 based on industry and size criteria. What are essential and important sectors and company size thresholds? Aikido's app has a NIS2 report feature.
ISO 27001 certification: 8 things we learned
We wished we'd known these tips before we started the ISO 27001:2022 compliance process. This is our advice to any SaaS company going for ISO 27001.
Cronos Group chooses Aikido Security to strengthen security posture for its companies and customers
The Cronos Group chooses Aikido Security to strengthen its security posture. Aikido's Partner Portal gives The Cronos Group a central overview of the companies in their group. Additionally, as a reseller, The Cronos Group will offer Aikido to its clients.
How Loctax uses Aikido Security to get rid of irrelevant security alerts & false positives
By embracing Aikido Security's solutions, Loctax optimized its security posture, including getting rid of false positives. This has saved precious time each month and achieved remarkable cost efficiencies.
How StoryChief’s CTO uses Aikido Security to sleep better at night
Losing sleep over startup security concerns? Discover how Aikido Security improved StoryChief's security posture, providing peace of mind and better sleep for the CTO.
What is a CVE?
CVEs are the security world's shared language for known vulnerabilities, but in 2026, the system is under serious strain. This guide covers how CVEs work, how they're scored with CVSS, and why the databases teams rely on are no longer complete. It also covers what to do about it, including how Aikido Intel surfaces vulnerabilities that never make it into any public database.
New Aikido Security Features: August 2023
In the last few weeks, we’ve released many new features and expanded support for different tool stacks. We’ve upgraded our reachability engine to fully support PNPM, expanded AWS rules, pointed Autofix toward Python, and increased support for containers registries.
How Aikido Intel detects malware and vulnerabilities first
Aikido Intel is a real-time feed that catches malware and undisclosed vulnerabilities across open-source ecosystems, often within 8 minutes of release.
Anthropic's Fever Dream: Claude's package that stole real keys
Anthropic disclosed an agent that pushed real malware to PyPI. We think we found the package, and every mistake in it points back to the AI.
5 Socket security alternatives and why they are better
Socket built its name on malware detection. But detection speed alone is no longer the whole story. Here's how Aikido and four other alternatives compare on supply chain security, reachability analysis, licensing, and more.
AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors
Learn how to evaluate AI pentesting vendors with practical buying criteria, research from 1,000+ AI pentests, and a downloadable evaluation checklist.
A practical CTO security checklist to be Mythos-ready
A practical checklist for SaaS CTOs navigating a world with Mythos and agentic AI threats. Built around the defender's advantage: you have context attackers have to work to get. Covers the controls, practices, and operational habits that determine whether your team finds and fixes issues before someone else does.
Get secure now
Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.
