.avif)
Why License Scanning Matters
Some open-source licenses have clauses that could force you to open-source your own code. It’s crucial to ensure none of your dependencies carry licenses that threaten your business’s IP. License scanning also prepares you to provide SBOMs during security audits.
Get an Overview on License Risk
Get a complete overview of all licenses in use and the risk associated with each.
Easily Export SBOMs
Export a CycloneDX SBOM with one click (or a CSV list, if needed).
License scanning features
.avif)
No legal jargon, just license facts
Aikido’s vetted license database translates complex legal jargon into plain, actionable language. Quickly understand each license’s obligations and risks.
Full license coverage, including containers
Most license tools only scan your repositories. Aikido gives you full coverage by scanning the licenses inside your container images as well.
“Aikido makes your security one of your USPs thanks to their integrated automated reporting solution, which helps for ISO & SOC2 certification”
Fabrice GManaging director at Kadonation
FAQs about open source license security
Yes - you can export a full SBOM in CycloneDX, SPDX, or CSV format with one click. Just open the Licenses & SBOM report to see all your packages and licenses.
Yes - you can connect a real repo (read-only access), or use our public demo project to explore the platform. All scans are read-only and Aikido never makes changes to your code. Fixes are proposed via pull requests you review and merge.
We can’t & won’t, this is guaranteed by read-only access.
Aikido does not store your code after analysis has taken place. Some of the analysis jobs such as SAST or Secrets Detection require a git clone operation. More detailed information can be found on docs.aikido.dev.
Of course! When you sign up with your git, don’t give access to any repo & select the demo repo instead!
Yes — we run yearly third-party pentests and maintain a continuous bug bounty program to catch issues early.
Secure your open source license risks
Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.
.png)