PLATFORM PROFILE · ALSO REVIEWED
Aikido Security review: AutoFix and flat prices for smaller teams
Short answer
By The Pipeline Desk · Best Agentic AppSec · Published 2026-10-08
Desk research from public vendor pages, changelogs and standards documents. Vendor facts read in September 2026, updated 2026-10-11. Editorial assessment; we did not run the products.
Also reviewed: scored on the same criteria but outside the top 10.
Flat published prices and AutoFix on the free plan
What does Aikido do for agentic AppSec?
An all-in-one code security platform for smaller teams with flat published plans, AutoFix pull requests and Aikido Safe Chain.
Named agentic products: AutoFix, Deep PR Review, Aikido Safe Chain and the Altar open-weight security model.
Where along the pipeline does Aikido act?
Agent Not documented
No agent inventory, MCP governance or agent policy controls are described on the pages reviewed.
Source: Aikido Security IDE integrations · Read 27 Sep 2026
IDE Documented
Free IDE plugin for VS Code, Cursor and Windsurf (SAST and secrets in JavaScript, TypeScript and Python).
Source: Aikido Security IDE integrations · Read 27 Sep 2026
Pull request Documented
PR Security Review from the Basic plan.
Source: Aikido Security pricing · Read 11 Oct 2026
Pipeline Documented
Aikido Safe Chain blocks malware at package install; Pro adds malware detection.
Source: Aikido Security homepage · Read 27 Sep 2026
Triage Documented
SCA reachability, EPSS-based prioritization and AI-based false positive reduction and auto-triage.
Source: Aikido Security pricing · Read 11 Oct 2026
Fix Documented
AutoFix opens pull requests with fixes; the free plan includes 10 AI AutoFixes a month.
Source: Aikido Security pricing · Read 11 Oct 2026
How does Aikido score on each criterion?
| Criterion | Weight | Score | Why |
|---|---|---|---|
| Agent and MCP discovery | 10% | 2 / 10 | No inventory of agents or MCP servers is described on the pages reviewed. Source: Aikido Security IDE integrations · Read 27 Sep 2026 |
| Agent policy enforcement and audit | 10% | 2 / 10 | No agent policy controls are described; the IDE plugin scans code. Source: Aikido Security IDE integrations · Read 27 Sep 2026 |
| Secret handling for agents | 5% | 5 / 10 | Secrets scanning in the IDE plugin and on every plan; secret handling inside agent sessions is not described. Source: Aikido Security IDE integrations · Read 27 Sep 2026 |
| Agentic remediation | 20% | 6 / 10 | AutoFix opens pull requests, with 10 AI AutoFixes a month on the free plan; validation is not stated. Source: Aikido Security pricing · Read 11 Oct 2026 |
| Agentic triage and prioritization | 15% | 8 / 10 | The pricing comparison lists SCA reachability, EPSS-based prioritization and AI-based false positive reduction and auto-triage. Source: Aikido Security pricing · Read 11 Oct 2026 |
| SDLC policy and supply chain posture | 10% | 7 / 10 | Aikido Safe Chain blocks malware at package install and Pro adds malware detection; pipeline posture is not described. Source: Aikido Security homepage · Read 27 Sep 2026 |
| Scanner coverage and orchestration | 10% | 7 / 10 | SAST, AI SAST, SCA and secrets on every plan; the CI API accepts only Checkov SARIF and Syft SBOM uploads, and general third-party scanner ingestion is not stated. Source: Aikido docs: CI API custom scan results · Read 11 Oct 2026 |
| Named coding agent reach | 10% | 3 / 10 | Names 2 of the six agents we track: Cursor and Windsurf. Source: Aikido Security IDE integrations · Read 27 Sep 2026 |
| Pricing and trial transparency | 10% | 10 / 10 | Flat prices are published: Developer $0 (2 users), Basic $350, Pro $700 and Advanced $1,050 a month with 10 users included, as displayed on the pricing page. Source: Aikido Security pricing · Read 11 Oct 2026 |
Which coding agents does Aikido name?
- Claude CodeNot named
- CursorNamed
- GitHub CopilotNot named
- WindsurfNamed
- OpenAI CodexNot named
- KiroNot named
Aikido names 2 of the six agents we track.
- Aikido's entries refer to its IDE plugin, not to controls on the agent.
What does it cost, and can you start free?
- Pricing
Developer $0 (free forever: 2 users, 10 repos, 10 AI AutoFixes a month). Basic $350 a month (10 users, 100 repos, unlimited AI AutoFixes). Pro $700 a month (10 users, 200 repos). Advanced $1,050 a month (10 users, 500 repos). Enterprise tailored. Prices as displayed on the pricing page, which offers an annual (10% off) and a monthly toggle; the billing basis of the displayed figures is not labelled.
Source: Aikido Security pricing · Read 11 Oct 2026
- Free start
- Free forever for 2 users, including 10 AI AutoFixes a month.
Where is Aikido strongest, and where does it fall short?
Strongest
- The clearest published pricing in this set, with a free plan that includes AI AutoFixes.
- AutoFix lands fixes as pull requests.
Falls short
- Agent and MCP discovery: 2 / 10; highest Legit Security and Backslash Security 10 / 10
- Agent policy enforcement and audit: 2 / 10; highest Backslash Security 9 / 10
- Secret handling for agents: 5 / 10; highest Legit Security 10 / 10
- Agentic remediation: 6 / 10; highest Legit Security and GitHub Advanced Security 9 / 10
- Agentic triage and prioritization: 8 / 10; highest Legit Security, Apiiro and Endor Labs 10 / 10
- SDLC policy and supply chain posture: 7 / 10; highest Legit Security 10 / 10
- Scanner coverage and orchestration: 7 / 10; highest Legit Security 10 / 10
- Named coding agent reach: 3 / 10; highest Legit Security and Snyk 8 / 10
- No controls on the coding agent itself are described on the pages reviewed.
- General ingestion of other scanners' findings is not stated; the CI API accepts Checkov SARIF and Syft SBOMs.
Key facts
| Plans | Free: SCA, SAST, AI SAST, secrets and 10 AI AutoFixes a month. Basic adds unlimited AI AutoFixes. Fixes are proposed via pull requests you review and merge. Available through AWS and Azure; startup discount up to 30%. Source: Aikido Security pricing · Read 11 Oct 2026 |
|---|---|
| IDE plugin | Free for VS Code, Cursor and Windsurf; paid plans add JetBrains, Visual Studio and Android Studio. Source: Aikido Security IDE integrations · Read 27 Sep 2026 |
| Altar | Released 21 September 2026: an open-weight security model derived from GLM-5.3, built so organizations can run vulnerability detection and pentesting inside their own infrastructure. Source: Aikido Security blog: Altar open-weight model · Read 27 Sep 2026 |
How does Aikido compare head to head?
| Comparison | Result |
|---|---|
| Aikido Security or Apiiro | Apiiro 6.30, Aikido Security 5.75 |
| Aikido Security or Backslash Security | Aikido Security 5.75, Backslash Security 4.90 |
| Aikido Security or Cycode | Cycode 7.70, Aikido Security 5.75 |
| Aikido Security or Endor Labs | Endor Labs 7.60, Aikido Security 5.75 |
| Aikido Security or GitHub Advanced Security | GitHub Advanced Security 6.35, Aikido Security 5.75 |
| Aikido Security or Legit Security | Legit Security 8.80, Aikido Security 5.75 |
| Aikido Security or OX Security | OX Security 7.25, Aikido Security 5.75 |
| Aikido Security or Semgrep | Semgrep 5.95, Aikido Security 5.75 |
| Aikido Security or Snyk | Snyk 7.15, Aikido Security 5.75 |
| Aikido Security or Wiz Code | Wiz Code 6.00, Aikido Security 5.75 |
Frequently asked questions
How much does Aikido Security cost?
Developer $0 (free forever: 2 users, 10 repos, 10 AI AutoFixes a month). Basic $350 a month (10 users, 100 repos, unlimited AI AutoFixes). Pro $700 a month (10 users, 200 repos). Advanced $1,050 a month (10 users, 500 repos). Enterprise tailored. Prices as displayed on the pricing page, which offers an annual (10% off) and a monthly toggle; the billing basis of the displayed figures is not labelled. Free forever for 2 users, including 10 AI AutoFixes a month.
Does Aikido Security control what coding agents do?
Not on the pages we reviewed. No agent inventory, MCP governance or agent policy controls are described on the pages reviewed.
Does Aikido Security have an agent that writes fixes?
Yes. AutoFix opens pull requests with fixes; the free plan includes 10 AI AutoFixes a month.