Tool profile
Aikido Security: cost, fit and limits
Aikido Security is a developer security platform from the Belgian company Aikido Security BV that scans code, dependencies, cloud accounts and container images in one workspace, and uses an AI agent to propose fixes for the issues it finds.
What to know first
Aikido Security bundles several scanners behind one login, and container image scanning is included in every plan with a stated image cap. The Developer plan is free for two users, while paid plans are listed by repository and image counts. A team deciding on Aikido mostly weighs breadth against depth: image scanning is agentless and registry-based, and the page marks container and Kubernetes runtime scanning as coming soon.
Aikido Security at a glance
| Maker | Aikido Security BV, Belgium |
|---|---|
| Free plan | Yes |
| Entry price | From €45 per scoped AI pentest |
| API access | Yes |
| Category | Best AI Container Security Software in 2026, rank 12 of 10 |
| Website | aikido.dev |
Who Aikido Security is best for
Startups with a first security audit
The Developer plan costs nothing and includes two container images, one cloud account and ten AI AutoFixes a month, which is enough to produce a first report for a customer questionnaire.
Teams with many small services
Plan limits count images and repositories, so a company with dozens of microservices can see on the pricing page how many images each tier covers before it books a call.
Buyers who need certificates
The security page claims ISO 27001:2022, ISO 42001 and SOC 2 Type II, and procurement staff can request the certificates through the trust center during a vendor review.
Aikido Security plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Developer | $0, free forever | Two users, 10 repositories, 2 container images, 1 domain, 1 cloud account and 10 AI AutoFixes a month, with rescans every three days. |
| Basic | 300 per month (currency not stated) | Base of 10 users, 100 repositories, 50 container images, 25 AI credits a month and unlimited AI AutoFixes. |
| Pro | 600 per month (currency not stated) | Base of 10 users, 200 repositories, 100 container images and 100 AI credits a month. |
| Advanced | 600 per month (currency not stated) | 500 repositories, 200 container images and 200 AI credits a month, according to the pricing table. |
| Aikido Max | Quote only | Unlimited monthly credits for all AI features under a fair use policy, and enterprise terms including FedRAMP Moderate. |
Checked October 2026.
What Aikido Security does
- Base image and Dockerfile checks
- The scanner inspects base images, Dockerfile commands and Kubernetes workloads for vulnerable packages, outdated software, malware and license risks, and can rescan images already stored in connected registries on a schedule.
- AI AutoFix for images
- For a flagged image the agent can swap in a pre-hardened base, bump a package or open a pull request, and a preview counts the problems the change clears and warns if it brings new ones.
- Agentless registry scanning
- Aikido pulls image layers from a connected registry or through the CLI, so no sensor is installed on the nodes. The product page lists Docker Hub, AWS ECR, GCP, Azure, GitHub Packages, GitLab and Harbor.
- CI/CD plugins
- Integration tokens and plugins for GitHub Actions, GitLab CI and Jenkins let a pipeline scan an image before it reaches a cluster, which the page suggests as the main checkpoint.
How Aikido Security handles your data
The privacy policy names Aikido Security BV, headquartered in Ghent, Belgium, and says service data is stored in databases hosted by third parties in the United States and the European Union. It does not mention AI or machine learning, and it says service data is retained to analyze Aikido's own operations. The security page says repository clones run in a fresh container that is wiped after analysis, usually within one to five minutes. It lists ISO 27001:2022, ISO 42001, SOC 2 Type II and GDPR compliance. Whether customer data trains AI models: the vendor's policy was not checked for this.
Where Aikido Security falls short in practice
- No live runtime view yet. Container and Kubernetes runtime scanning was marked coming soon on the image scanner page, so a compromised pod or a reverse shell in a running container would not show up through this product today.
- Currency not printed. The pricing table showed monthly numbers without a currency symbol, and the pentest line quotes euros and dollars side by side. Confirm the billing currency and the user count in a written quote before budgeting.
- Image caps bind quickly. Fifty images on Basic and 100 on Pro sound ample, but every service, environment and base image variant can count toward the cap, so a monorepo with many Dockerfiles may need the Advanced tier.
Works with
Alternatives to Aikido Security
Aikido Security: common questions
Does Aikido scan containers that are already running in Kubernetes?
Not at runtime yet. The image scanner page lists container and Kubernetes runtime scanning as coming soon. Today Aikido checks images in registries and CI, and it detects issues in Kubernetes workload definitions, so it finds flawed images before deployment rather than attacks in live pods.
How many container images fit in each Aikido plan?
The pricing page lists 2 images on Developer, 50 on Basic, 100 on Pro and 200 on Advanced. Each paid plan includes 10 users at the base price, with more users selectable. Count every image and variant your team builds, since each may use a slot.
Can Aikido fix a vulnerable base image automatically?
AutoFix can propose a hardened base image, a package bump or an image upgrade and generate a fix pull request. Per the page, a preview counts the issues cleared and flags new ones, but a reviewer still decides on the merge.
Is Aikido a European vendor?
The privacy policy states Aikido Security BV is headquartered in Ghent, Belgium. It also says data is held by third-party providers in both the United States and the European Union, so being Belgian does not by itself mean EU-only storage. Ask which region holds your tenant.
What does a free Aikido account include for containers?
The Developer plan includes two container images, ten repositories, one domain, one cloud account and two users, with rescans every three days and ten AI AutoFixes a month. No credit card is required. It is enough to test one or two services.