Welcome to our blog.
Surviving cybersecurity until the end of 2026
After Binance, LiteLLM, PHP2Shell and eMudhra, here are six practices and a checklist to limit what the next compromise can reach before 2027.
Critical Linux kernel TCP vulnerability can allow remote code execution (CVE-2026-98432)
Under specific conditions, a remote attacker with no credentials can run code on an unpatched Linux server, and a proof of concept has been reported for servers with a multipath TCP listener. See who is affected, how to patch, and what to do if your vendor has no fix yet.
2026 State of AI in Pentesting
Our latest report captures the perspectives of 400 CISOs, CTOs, and senior engineering leaders across Europe and the US. It explores how AI is changing penetration testing, why traditional approaches are struggling to keep pace with modern software delivery, and what security leaders want from the next generation of penetration testing.
SOC 2 certification: 5 things we learned
What we learned about SOC 2 during our audit. ISO 27001 vs. SOC 2, why Type 2 makes sense, and how SOC 2 certification is essential for US customers.
Top 10 app security problems and how to protect yourself
As a developer, you don't have time for perfect app security. Let's give you the TL;DR on the biggest problems, whether you're at risk, and how to fix them.
We just raised our $17 million Series A
We've raised $17M to bring “no BS” security to devs. We’re happy to welcome Henri Tilloy from Singular.vc on board, who is again joined by Notion Capital and Connect Ventures. This round comes just 6 months after we raised $5.3M in seed funding. That’s fast.
Webhook security checklist: How to build secure webhooks
Building webhooks in your SaaS? Use this webhook security checklist to make sure you're taking the necessary steps to protect your app and user data.
The Cure For Security Alert Fatigue Syndrome
Aikido aims to cure Security Alert Fatigue Syndrome by reducing noise and false positives that waste developers' time. Learn how Aikido intelligently ignores irrelevant security alerts for you, adapts severity scores. This helps Aikido users to easily prioritize fixes for genuine threats. This win-win approach improves developer productivity and resolves security issues faster.
NIS2: Who is affected?
Is your B2B company in scope of the NIS2 Directive? Find out if you need to comply with NIS2 based on industry and size criteria. What are essential and important sectors and company size thresholds? Aikido's app has a NIS2 report feature.
ISO 27001 certification: 8 things we learned
We wished we'd known these tips before we started the ISO 27001:2022 compliance process. This is our advice to any SaaS company going for ISO 27001.
Cronos Group chooses Aikido Security to strengthen security posture for its companies and customers
The Cronos Group chooses Aikido Security to strengthen its security posture. Aikido's Partner Portal gives The Cronos Group a central overview of the companies in their group. Additionally, as a reseller, The Cronos Group will offer Aikido to its clients.
Aikido launches Noon: workforce security for every employee
Aikido launches Noon, a workforce security business. AI governance, device and email protection, and training against AI-powered phishing and deepfakes.
wfx-loot campaign pushes CI secret stealer to tens of thousands of repositories
A wave of compromised accounts are pushing a CI secret stealer. See if you’re affected, what it steals, and what to rotate.
Top 10 Software Composition Analysis (SCA) tools in 2026
SCA tools are our best line of defense for open-source security, this article explores the top 10 open-source dependency scanners for 2026
AI Pentesting Buyer's Guide: How to evaluate AI pentesting vendors
Learn how to evaluate AI pentesting vendors with practical buying criteria, research from 1,000+ AI pentests, and a downloadable evaluation checklist.
A practical CTO security checklist to be Mythos-ready
A practical checklist for SaaS CTOs navigating a world with Mythos and agentic AI threats. Built around the defender's advantage: you have context attackers have to work to get. Covers the controls, practices, and operational habits that determine whether your team finds and fixes issues before someone else does.
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system.
Connect a repo to discover what the reasoning agents find in your codebase.
