Developer security platform

Aikido and Aevral, at a glance

Aikido is a developer security platform (SAST, dependencies, secrets, IaC, pentest) and publishes Code Security Audit and Deep Review. Aevral is built for its own security reading of your code. Keep the platform.

Aikido is built as one platform for SAST, dependencies, secrets, IaC, and pentest. Keep that. It also publishes Code Security Audit and Deep Review: agentic reading of source for authorization, IDOR, and business logic. Aevral's whole-repo scan is built for that reading; its PR review, live on install, looks for that and a wider class list on the diff.

Aikido focuses on

SAST, dependencies, secrets, IaC, and pentest on the platform.
Code Security Audit and Deep Review, as Aikido publishes them.
Bringing those findings into one platform.

Aevral adds alongside

The authorization, IDOR, and business-logic reading, across files, on the whole repository.
PR review, live on install: that reading plus injection, XSS, SSRF, path traversal, and LLM-integration flaws on the diff.
A fix prompt you hand to the coding agent you already use, with a human reviewing before merge.

Run them together

Keep Aikido for SAST, dependencies, secrets, IaC, and the live pentest; run Aevral for the authorization and business-logic reading of the repository.

Aikido and Aevral, in depth; Aevral whole-repo scan.

Also alongside

Security review, handled.

Install the GitHub App and PR review starts on. Sign in with GitHub to connect it, then press Scan for the repository you already have.

Install the GitHub App Log in Sign up

For professional use. By installing, you confirm you can act for the account or organization that owns it, and you accept the Terms and DPA on its behalf.