Aikido
Start for Free
No CC required

Sooraj Shah

Content Marketing Lead
Sooraj Shah is Content Marketing Lead at Aikido Security. He has a background as a journalist for publications such as the BBC, the FT, Infosecurity Magazine and SC Magazine, interviewing CEOs, CISOs, CTOs and CIOs, and as a content marketer for B2B tech companies and start-ups.
AI Benchmarking
Aikido Libraries
Data Security
Hardened images
GitHub Security
Mythos
Aikido Device Protection
Aikido Endpoint
Pypi
Secrets
Aikido Zen
IDOR vulnerabilities
IDE Security
Announcements
European Cyber Security
Continuous Pentesting
AI Safety
Self-securing Software
SSDLC
VS Code
AI Penetration Testing
Threat Modeling
Cyber Resilience Act
Triaging
AutoTriage
Pentesting
Bazel
Code Quality
OWASP
NIS2
Legaltech
fintech
RASP
End of Life
SQL Injections
DAST
cnapp
CSPM
ASPM
Infrastructure as a Code IaC
Network Security Monitoring
License Scanners
SBOM
Container Scanning
AppSec
Vulnerabilities
Software Supply Chain Security
API
Dependencies
Continuous Security Monitoring
DevSecOps
Vibe Coding
AI
NPM
autofix
Malware
Article
open-source
SCA
intel
SOC 2
usecase
Tools
SAST
Compliance
CircleCI
Codeship
IMDSv2
Cloud
IMDSv1
SSRF
AWS

Blog posts by Sooraj Shah

September 15, 2025
•
Compliance

Complying with the Cyber Resilience Act (CRA) using Aikido Security

Learn how to comply with the EU Cyber Resilience Act (CRA). Aikido Security helps developers and security teams meet CRA requirements with automated scanning, SBOM, and runtime protection

Tags/

#NIS2

#Compliance

#SOC 2

#Cyber Resilience Act

September 5, 2025
•
Vulnerabilities & Threats

Without a Dependency Graph Across Code, Containers, and Cloud, You’re Blind to Real Vulnerabilities

Stop drowning in CVEs. Without a dependency graph across code, containers, and cloud, you’ll miss real vulnerabilities and chase false positives

Tags/

#Dependencies

#SAST

#SCA

August 26, 2025
•
Vulnerabilities & Threats

WTF is Vibe Coding Security? Risks, Examples, and How to Stay Safe

Vibe coding is the new AI coding trend where anyone can spin up an app in hours. But from Replit’s database wipe to exposed tea apps, the risks are real. Learn what vibe coding security means, the difference from agentic coding, and how CISOs can keep the vibes without the vulnerabilities.

Tags/

#Vibe Coding

July 25, 2025
•
Guides & Best Practices

What Is AI Penetration Testing? A Guide to Autonomous Security Testing

Discover how AI penetration testing outperforms automated scans and manual pentesters. Learn how autonomous tools deliver real exploits, reduce false positives, and empower security teams.

Tags/

#Pentesting

#AI

August 5, 2024
•
DevSec Tools & Comparisons

5 Snyk Alternatives and Why They Are Better

We compare 5 great Snyk alternatives and explain why some are better than others for software security

Tags/

#Tools

Get secure today,
quickly and for free.

Secure your code, cloud, and runtime in one central system.
Connect a repo to discover what the reasoning agents find in your codebase.

Start for Free
No credit card required | Scan results in 32 seconds.
Trusted by 150k+ orgs