Aikido
Container ELS

Container Extended Lifetime Support

Keep your base images secure - without risky OS upgrades

  • Hardened ELS base images
  • One-click AutoFix PRs
  • Upstream-compatible (no breaking changes)
Your data won't be shared · Read-only access · No CC required
Dashboard with autofixes tab

"With Aikido, we can fix an issue in just 30 seconds – click a button, merge the PR, and it’s done."

"Aikido's auto-remediation feature is a huge time-saver for our teams. It cuts through the noise, so our developers can focus on what really matters."

“With Aikido, security is just part of the way we work now. It’s fast, integrated, and actually helpful for developers.”

Trusted by 50k+ orgs
|
Loved by 100k+ devs
|
4.7/5
Features

License scanning features

Discover Vulnerable Base Images

Secure the source of your containers. Aikido maps every image to its base and shows where a Root-maintained ELS image can remove risk fast.

  • Image → Base Mapping: See which services inherit each base.
  • Layer-Aware CVEs: Focus on HIGH/CRITICAL issues in the base layer.
  • Root ELS Availability: Instantly know when a Root ELS replacement exists for your current base.
Aikido create sbom

Find & Fix at the Source Layer

Swap to a hardened ELS image. No rewrites, minimal change risk. Downstream containers get safer by default.Prioritized Suggestions: Aikido surfaces the ELS option where it cuts the most risk.

  • Prioritized Suggestions: Aikido surfaces the ELS option where it cuts the most risk.
  • One-Click AutoFix PRs: Update the FROM line via PR or copy the Dockerfile snippet.
  • Compatibility First: Stay on the same distro/major version; Aikido backports the patches.

Continuous & Proactive Hardening (Powered by Root)

Aikido monitors new ELS builds and prompts upgrades, without forcing full OS jumps.

  • Ongoing Updates: Alerts when a newer ELS build is available
  • Policy & Gating: Block merges that ignore available ELS fixes.
  • Trusted Supply: ELS images maintained by Root, hosted via docker.aikido.io, surfaced by Aikido.

Full Coverage in One Platform

Replace your scattered toolstack with one platform that does it all—and shows you what matters.

Code

Dependencies

Find vulnerable open-source packages in your dependencies, including transitive ones.

Learn more
Cloud

Cloud (CSPM)

Detects cloud and K8s infrastructure risks (misconfigurations, VMs, Container images) across major cloud providers.

Learn more
Code

Secrets

Checks your code for leaked and exposed API keys, passwords, certificates, encryption keys, etc...

Learn more
Code

Static Code Analysis (SAST)

Scans your source code for security risks before an issue can be merged.

Learn more
Code

Infrastructure as Code Scanning (IaC)

Scans Terraform, CloudFormation & Kubernetes infrastructure-as-code for misconfigurations.

Learn more
Test

Dynamic Testing (DAST)

Dynamically tests your web app’s front-end & APIs to find vulnerabilities through simulated attacks.

Learn more
Code

License Risk & SBOMs

Monitors your licenses for risks such as dual licensing, restrictive terms, bad reputation, etc... And generate SBOMs.

Learn more
Code

Outdated Software (EOL)

Checks if any frameworks & runtimes you are using are no longer maintained.

Learn more
Cloud

Container Images

Scans your container images for packages with security issues.

Learn more
Code

Malware

Prevent malicious packages from infiltrating your software supply chain. Powered by Aikido Intel.

Learn more
Test

API Scanning

Automatically map out and scan your API for vulnerabilities.

Learn more
Cloud

Virtual Machines

Scans your virtual machines for vulnerable packages, outdated runtimes and risky licenses.

Learn more
Defend

Runtime Protection

An in-app firewall for peace of mind. Automatically block critical injection attacks, introduce API rate limiting & more

Learn more
Code

IDE Integrations

Fix issues as you code– not after. Get in-line advice to fix vulnerabilities before commit.

Learn more
Code

On-Prem Scanner

Run Aikido’s scanners inside your environment.

Learn more
Code

CI/CD Security

Automate security for every build & deployment.

Learn more
Cloud

AI Autofix

One-click fixes for SAST, IaC, SCA & containers.

Learn more
Cloud

Cloud Asset Search

Search your entire cloud environment with simple queries to instantly find risks, misconfigurations, and exposures.

Learn more

Review

“Aikido makes your security one of your USPs thanks to their integrated automated reporting solution, which helps for ISO & SOC2 certification”

Fabrice G

Managing director at Kadonation

How does it tap into other parts of Aikido? Can we pitch that?

  • ELS is orchestrated by Aikido: findings surface in Container risk views.
  • AutoFix opens PRs in your SCM, and policies can require adopting ELS fixes before merge. 
  • Tie-ins to PR Security and Compliance show measurable risk reduction and audit evidence. 

One-sentence pitch: “Aikido + Root turns base-image patching into a safe, automated PR workflow that proves risk is going down without slowing releases.

What are the main features of ELS containers?

Auto-discovery of vulnerable base images; a clear indication when an ELS replacement exists; one-click AutoFix PRs that update the Dockerfile; continuous prompts when newer ELS builds land; support for both amd64/arm64 architectures; policy controls to gate merges that ignore available fixes; visibility of blast radius (which services inherit each base).

What is the main value that ELS containers bring?

It lets teams remove High and Critical CVEs from base images without bumping OS versions or risking dependency breakage. By swapping the FROM line to an ELS image, you harden your base layers quickly, cut risk and audit noise, and keep delivery velocity intact.

Get secure for free

Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.

No credit card required | Scan results in 32secs.