Product
Everything you need to secure code, cloud, and runtime– in one central system
Code
Dependencies
Prevent open-source risks (SCA)
Secrets
Catch exposed secrets
SAST
Secure code as its written
Container Images
Secure images easily
Malware
Prevent supply chain attacks
Infrastructure as Code
Scan IaC for misconfigurations
License Risk & SBOMs
Avoid risk, be compliant
Outdated Software
Know your EOL runtimes
Cloud
Cloud / CSPM
Fix misconfigs, exposures, risks.
DAST
Black-box security testing
API Scanning
Test your API’s for vulns
Virtual Machines
No agents, no overhead
Runtime Protection
In-app Firewall / WAF
Code Quality
AI code quality review
Autonomous Pentests
soon
AI-driven attack testing
Defend
Features
AI AutoFix
1-click fixes with Aikido AI
CI/CD Security
Scan before merge and deployment
IDE Integrations
Get instant feedback while coding
On-Prem Scanning
Compliance-first local scanning
Solutions
Use Cases
Compliance
Automate SOC 2, ISO & more
Vulnerability Management
All-in-1 vuln management
Secure Your Code
Advanced code security
Generate SBOMs
1 click SCA reports
ASPM
End-to-end AppSec
CSPM
End-to-end cloud security
AI at Aikido
Let Aikido AI do the work
Block 0-Days
Block threats before impact
Industries
FinTech
HealthTech
HRTech
Legal Tech
Group Companies
Agencies
Startups
Enterprise
Mobile apps
Manufacturing
Public Sector
Banks
Resources
Developer
Docs
How to use Aikido
Public API docs
Aikido developer hub
Changelog
See what shipped
Security
In-house research
Malware & CVE intelligence
Trust Center
Safe, private, compliant
Learn
Software Security Academy
Students
Get Aikido free
Open Source
Aikido Intel
Malware & OSS threat feed
Zen
In-app firewall protection
OpenGrep
Code analysis engine
Aikido SafeChain
Prevent malware during install.
Integrations
IDEs
CI/CD Systems
Clouds
Git Systems
Compliance
Messengers
Task Managers
More integrations
Customers
About
About
About
Meet the team
Careers
We’re hiring
Press Kit
Download brand assets
Calendar
See you around?
Open Source
Our OSS projects
Customer Stories
Trusted by the best teams
Partner Program
Partner with us
BlogPricingContact
Login
Start for Free
No CC required
Aikido
Menu
Aikido
EN
EN
FR
JP
DE
PT
Login
Start for Free
No CC required
Learn
/
Compliance Frameworks Hub

Chapter 1: Understanding Security Compliance Frameworks

Security compliance. Sounds like corporate buzzword bingo, right? Another layer of rules dreamed up by auditors to slow you down?

Honestly, sometimes it feels that way. But here’s the no-BS truth: understanding security compliance frameworks isn’t just for the legal team anymore. If you’re building software, especially in the cloud, this stuff directly impacts your code, your pipeline, and your sanity. Ignoring it can lead to hefty fines, blown customer trust, and even project shutdowns.

This chapter cuts through the jargon. We'll explain what these frameworks actually are in plain developer terms, why you should give a damn, and how they inevitably touch your day-to-day DevSecOps workflow. No fluff, just the essentials to navigate the world of security compliance without losing your mind.

Ready to make sense of the compliance beast? Let's get started.

Table of contents:
What Are Compliance Frameworks and Why Do They Matter?
How Compliance Frameworks Affect DevSecOps Workflows
Common Elements Across Frameworks

Table of contents

Chapter 1: Understanding Compliance Frameworks

What Are Compliance Frameworks and Why Do They Matter?
How Compliance Frameworks Affect DevSecOps Workflows
Common Elements Across Frameworks

Chapter 2: Major Compliance Frameworks Explained

SOC 2 Compliance
ISO 27001
ISO 27017 / 27018
NIST SP 800-53
NIST SSDF (SP 800-218)
OWASP ASVS
GDPR
NIS2 Directive
DORA
EU Cyber Resilience Act (CRA)
CMMC
PCI DSS
FedRAMP
HIPAA / HITECH
Essential Eight
Singapore CCoP (for CII)
Japan Cybersecurity Act & Related (APPI)

Chapter 3: Implementing Compliance in Development

Choosing the Right Frameworks for Your Organization
Building Compliant DevSecOps Pipelines
Training Development Teams for Compliance
Audit Preparation for Developers
Maintaining Compliance Long-Term
The End

Related blog posts

See all
See all
September 16, 2025
•
Compliance

Why European Companies Choose Aikido as Their Cybersecurity Partner

European companies trust Aikido Security to secure code, cloud, and runtime with GDPR, NIS2 & Cyber Resilience Act compliance and EU data sovereignty.

September 15, 2025
•
Compliance

Complying with the Cyber Resilience Act (CRA) using Aikido Security

Learn how to comply with the EU Cyber Resilience Act (CRA). Aikido Security helps developers and security teams meet CRA requirements with automated scanning, SBOM, and runtime protection

June 4, 2024
•
Compliance

SOC 2 certification: 5 things we learned

What we learned about SOC 2 during our audit. ISO 27001 vs. SOC 2, why Type 2 makes sense, and how SOC 2 certification is essential for US customers.

Company
  • Product
  • Pricing
  • About
  • Careers
  • Contact
  • Careers
  • Partner with us
Resources
  • Docs
  • Public API Docs
  • Vulnerability Database
  • Blog
  • Integrations
  • Glossary
  • Press Kit
  • Customer Reviews
Industries
  • For HealthTech
  • For MedTech
  • For FinTech
  • For SecurityTech
  • For LegalTech
  • For HRTech
  • For Agencies
  • For Enterprise
  • For PE & Group Companies
  • For Government & Public Sector
  • For Smart Manufacturing & Engineering
Use Cases
  • Compliance
  • SAST & DAST
  • ASPM
  • Vulnerability Management
  • Generate SBOMs
  • WordPress Security
  • Secure Your Code
  • Aikido for Microsoft
  • Aikido for AWS
Compare
  • vs All Vendors
  • vs Snyk
  • vs Wiz
  • vs Mend
  • vs Orca Security
  • vs Veracode
  • vs GitHub Advanced Security
  • vs GitLab Ultimate
  • vs Checkmarx
  • vs Semgrep
  • vs SonarQube
Legal
  • Privacy Policy
  • Cookie Policy
  • Terms of Use
  • Master Subscription Agreement
  • Data Processing Agreement
Connect
  • hello@aikido.dev
Security
  • Trust Center
  • Security Overview
  • Change Cookie Preferences
Subscribe
Stay up to date with all updates
LinkedInX
© 2025 Aikido Security BV | BE0792914919
🇪🇺 Registered address: Coupure Rechts 88, 9000, Ghent, Belgium
🇪🇺 Office address: Gebroeders van Eyckstraat 2, 9000, Ghent, Belgium
🇺🇸 Office address: 95 Third St, 2nd Fl, San Francisco, CA 94103, US
SOC 2
Compliant
ISO 27001
Compliant