Aikido Security

The product itself does everything we need and more. The way they support us is insane and I've never seen anything like it. We have a shared Slack channel and someone always responds, usually within minutes and often the CTO/CEO himself engages with us and our issues directly. They often fix issues the same day, and sometimes even on weekends. Their auto-ignore functionality, while not perfect, is best in class and does an amazing job at reducing the noise so we can concentrate on the security signal (i.e. actual problems). The web UI, while not perfect, is much better than any of the competitors I looked at (by a long way) and includes very powerful filtering functionality that always allows me to narrow down to the subset of our product that I want to focus on. They have a good API and quickly add anything we find missing from it. The reporting functionality is great and super valuable to make our GRC work easier by providing reporting based on standards (such as SOC 2) that we're trying to maintain. The integrations are expansive and cover everything we need and were easy to setup. Good SSO integration and audit logging.

As a software vendor servicing the accounting industry, security is paramount. Unfortunately, there's often a steep barrier to world-class security tooling for a growing self-funded startup. Aikido has struck a balance between price and functionality, where it's easy to see the value in their offering, and justify the cost. Their simple and transparent pricing made it much easier to budget and ensure our requirements are being met. Their product covers virtually the entire suite of features we need from a security tool to give us the comfort that we are following secure coding and deployment practices, while being non-intrusive to our staff.

It is simple to use, cost effective and integrated with our GRC provider Drata.

Honestly, these are all very minor (almost petty concerns). 1) The web UI, while great overall, has some weird inconsistencies (e.g. not being able to choose how to sort tables by column on some pages) 2) The docs, while expansive, are a little sprawling and hard to search, I tend to resort to asking a web-search enabled LLM to help me find what I need 3) The secret detection, whilst good overall, is probably the most prone to false positives. 4) The filtering is extremely powerful but can be somewhat unintuitive at times.

So far no real dislikes.

At first I could not login with my Microsoft account using Chrome but it started working the next day. I would like it to be a little cheaper for me as a 2 person development group but it still so much better than the cost for other systems or having to create something from scratch.