Sold by: Aikido Security
Get a pentest done, today. Autonomous AI agents that outperform humans at machine speed. Get a full audit-grade SOC2 or ISO27001 PDF report in hours, not weeks.
4.6
Overview
Core principles - Built by world-class hackers: designed to think and act like them, but safe and repeatable. - Scalable & continuous: run tests on demand, or continuously with each release. - Full visibility: every request, exploit, and finding can be observed live. - Actionable output: results are validated and prioritized, ready for developers to fix.
Standard Pentest This plan delivers a one-time Aikido Standard Autonomous Pentest. Best for: Comprehensive audit for a single application (up to 11 repos) and its primary APIs Output: Full PDF Report usable for SOC2 and ISO27001 compliance. Depth of Test: Provides the depth of a 2 week manual penetration test
Features: 400 Attacking Agents Blackbox, Whitebox, or Greybox Full PDF Audit Report Same-day Report Can always login, even with MFA Real-World Attack Simulation End-to-End Application Scanning Plus: Blackbox, Whitebox, or Greybox
Advanced Pentest This plan delivers a one-time Aikido Advanced Autonomous Pentest. Best for: Deeper analysis of mature applications Output: Full PDF Report usable for SOC2 and ISO27001 compliance. Dept of Test: Provides the depth of a 4 week manual penetration test.
All Standard Features, plus: 800 Attacking Agents in Total Complex Application Testing
Enterprise Pentest By subscribing to this plan, you are NOT purchasing Aikido Enterprise Pentest, you are requesting a quote for a one-time Aikido Enterprise Pentest, and our team will get in contact with you. Best for: Organizations with advanced offensive testing needs Output: Continuous offensive security that scales with your organization
All Advanced Features, plus: Custom # of Attacking Agents Broker Support For Apps on Local Networks Enterprise Support SLA for Support Training & Onboarding
Infinite - Continuous Pentest By subscribing to this plan, you are NOT purchasing Aikido Infinite, you are requesting a quote for Aikido Infinite, and our team will get in contact with you. Best for: Automatically pentest & fix vulnerabilities in every release. Autonomous agents pentest every deployment, validate exploitability, generate patches, and retest the fix, all before code hits production.
With Continuous Pentesting: Every change gets exhaustive real-time testing Discover vulnerabilities before release Findings come with ready-to-merge patches Signal, not noise with confirmed, exploitable findings only Your experts focus on crown jewels, agents cover the rest.
Highlights
- Aikido Pentest is an agentic, AI-powered penetration testing platform that performs deep, realistic security assessments in a fraction of the time of a traditional pentest. It uses hundreds of autonomous agents that behave like top-tier red teamers; discovering, exploiting, and validating vulnerabilities across your applications, APIs, and infrastructure.
Details
Sold by
Categories
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Trust Center
Access real-time vendor security and compliance information through their Trust Center powered by Drata or Vanta. Review certifications and security standards before purchase.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor, and additional usage. You pay upfront or in installments according to your contract terms with the vendor. This entitles you to a specified quantity of use for the contract duration. Usage-based pricing is in effect for overages or additional usage not covered in the contract. These charges are applied on top of the contract price. If you choose not to renew or replace your contract before the contract end date, access to your entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Standard Autonomous Pentest | For more information on Aikido pricing, please visit our pricing page: https://www.aikido.dev/pricing | $4,000.00 |
Advanced Autonomous Pentest | For more information on Aikido pricing, please visit our pricing page: https://www.aikido.dev/pricing | $8,000.00 |
Enterprise Autonomous Pentest | For more information on Aikido pricing, please visit our pricing page: https://www.aikido.dev/pricing | $50,000.00 |
Infinite Pentest | For more information on Aikido pricing, please visit our pricing page: https://www.aikido.dev/pricing | $50,000.00 |
Dimension | Cost/unit |
|---|---|
Additional Usage | $0.01 |
Dimensions summary
This contract prices AI penetration testing across four package levels: Standard, Advanced, Enterprise, and Infinite Autonomous Pentest. You pick the package that matches your testing needs, and each is billed by units. Infinite covers continuous testing that runs on every deployment, while the other packages scope to defined assessments. An Additional Usage dimension lets you buy extra units beyond your package allotment, so you can scale coverage as your application grows or you run more tests. Testing depth and scope drive which package fits your organization.
Top-of-mind questions for buyers
Testing runs on credits, which are consumed by AI agents during a pentest. Each agent can run up to 30 minutes. The number of agents needed depends on your application size, endpoints, and roles. Aikido scans your repos and sets the scope automatically to calculate the credits required.
The scoped packages test defined assessments you launch. Infinite runs continuously, triggering a scoped pentest on every deploy. It analyzes the code diff since the last pentest, ignores security-irrelevant changes, and tests only affected surfaces. Cost scales with how often you deploy and how much changes.
Additional Usage lets you purchase extra units once you exhaust your package's included allotment. You would use it when your application grows, you add more services or roles, or you run more frequent pentests than your base package covers. It adds capacity without switching packages.
www.aikido.dev+2
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Support Email: support@aikido.dev
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
Secure your code, cloud, and runtime in one central system.
Transparent flat-rate pricing to suit any size, with a free-forever developer plan.
Run continuous, AI-powered pentesting assessments with exploitability proof and reporting auditors and your engineers will both actually act on.
XBOW is an autonomous offensive security platform that delivers AI pentesting on-demand. Get the depth and results of a premium pentesting engagement in a fraction of the time.
This product has charges associated with it for custom security tooling, 24/7 support, and maintenance by Max Pen Test. Kali Linux is a specialized Linux distribution designed primarily for cybersecurity and penetration testing purposes. It is a powerful and widely-used operating system by security professionals, ethical hackers, and cybersecurity enthusiasts. Kali Linux comes pre-loaded with a vast array of tools and utilities for assessing and testing the security of computer systems and networks. These tools include vulnerability scanners, password cracking tools, network analysis tools, and more. Kali Linux is known for its flexibility, open-source nature, and frequent updates, making it a valuable resource for those involved in securing and testing the security of computer systems and networks. However, it's important to note that the use of Kali Linux should always be within legal and ethical boundaries, with proper authorization and consent for security testing activities.
Customer reviews
Elizaveta K.
Aikido Makes Security Fast, Simple, and Supportive
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
I love how Aikido consolidates SAST, dependency, and secret scanning into one tool, making onboarding new projects incredibly fast—just five minutes compared to two hours before. The dependency analysis is much clearer, grouping related issues and reducing noise. The support from the Aikido team is outstanding: responses are fast, and they even alerted us to a GitLab CVE before our own vulnerability management tool did.
What do you dislike about the product?
There isn’t much to dislike, but I would say that secret scanning findings are similar to previous tools, so there’s not a huge improvement in that specific area. Also, I don’t have exact numbers for issue reduction yet, so more detailed analytics could be helpful.
What problems is the product solving and how is that benefiting you?
It solved our dependency grouping problem. I also like that it offers AI AutoFixes instead of standard recommendations.
Thorben W.
Clear Security Priorities and Practical Remediation
Reviewed on Oct 08, 2026
Review provided by G2
What do you like best about the product?
I really appreciate Aikido's clear and predictable per-user pricing, which is much easier to plan for than the previous per-lines-of-code model. The integration of add-ons without hidden or unexpected costs, the strong balance of coverage and impact, and the ease of migration made Aikido stand out. It allows us to focus on security without worrying about budget overruns, and the platform supports our shift-left approach to security in development.
What do you dislike about the product?
There are currently no significant drawbacks for us with Aikido. We are still in the process of developing our KPIs and using reporting features, so I can't comment on compliance exports yet, but this is not a negative for our current needs.
What problems is the product solving and how is that benefiting you?
At Engel & Völkers Technology, we need to manage application security across multiple products while keeping remediation practical for our development teams. One of the biggest challenges is translating security findings into clear, actionable priorities.
Aikido helps us by consolidating code and dependency security findings in one place, adding the context we need to judge relevance, and providing guidance on how to resolve issues.
For us, the value is better visibility, sharper prioritization, and a more consistent remediation approach. It helps us use our security resources effectively and makes security a natural part of everyday development.
Aikido helps us by consolidating code and dependency security findings in one place, adding the context we need to judge relevance, and providing guidance on how to resolve issues.
For us, the value is better visibility, sharper prioritization, and a more consistent remediation approach. It helps us use our security resources effectively and makes security a natural part of everyday development.
Jelle D.
Useful security findings, but a steep upgrade path for solo developers
Reviewed on Oct 01, 2026
Review provided by G2
What do you like best about the product?
I’m evaluating Aikido across nine repositories as a solo developer, covering SaaS products and mobile apps. It has already spotted a shell-escaping issue I missed and flagged a high-severity dependency vulnerability before Dependabot did in my setup.
The clear overview and “inbox zero” approach make working through findings motivating. Even the free plan provides useful insights. Generating fixes as pull requests is convenient, although mine are still under review, so I cannot yet judge their end-to-end effectiveness.
The clear overview and “inbox zero” approach make working through findings motivating. Even the free plan provides useful insights. Generating fixes as pull requests is convenient, although mine are still under review, so I cannot yet judge their end-to-end effectiveness.
What do you dislike about the product?
Some findings and fixes need more context. For example, an autofix proposed removing debug output from an internal, non-web-exposed debugging script. The potential disclosure concern is understandable, but simply deleting the output defeats the script’s purpose. I also received missing-lockfile warnings for repositories where I don’t use dependencies.
The biggest barrier for me is the jump from free to €300/month. My free account shows that additional findings exist without revealing their details.
I would welcome a smaller paid plan around €50/month for solo developers, covering 15–20 repositories. My priorities would be full vulnerability details, dependency and licence scanning, an SBOM overview, integration with tools like GitHub Issues, and PR security checks. Bulk autofix and broader extras matter less to me. That would give me a practical reason to upgrade without jumping straight to a package designed for a larger team.
The biggest barrier for me is the jump from free to €300/month. My free account shows that additional findings exist without revealing their details.
I would welcome a smaller paid plan around €50/month for solo developers, covering 15–20 repositories. My priorities would be full vulnerability details, dependency and licence scanning, an SBOM overview, integration with tools like GitHub Issues, and PR security checks. Bulk autofix and broader extras matter less to me. That would give me a practical reason to upgrade without jumping straight to a package designed for a larger team.
What problems is the product solving and how is that benefiting you?
It gives me an additional view of security issues across my repositories and has surfaced issues my existing checks missed. Having findings together helps me assess what needs attention and work through them. The value is already visible, even though my evaluation of the paid features is still limited. While AI agents can spot this as well, Aikido is running 24/7 to spot them faster.
Matan K.
Aikido Delivers True Shift Left Security at Scale
Reviewed on Sep 25, 2026
Review provided by G2
What do you like best about the product?
I really appreciate how Aikido enables a true shift left with seamless integration into GitHub and other cloud-based source controls. The onboarding experience is smooth, with immediate scanning and clear, intuitive access for developers. Its reachability features make it easy to trace vulnerabilities to their exact source, and the platform's clarity and flexibility in triaging issues drastically reduce alert fatigue. The collaboration with the Aikido team has been outstanding, with fast responses and fixes. The ability to respond rapidly to zero-day events and the clarity in separating base image vulnerabilities from application code are both huge time-savers.
What do you dislike about the product?
We did experience some initial glitches during integration, though these were resolved quickly with support from the Aikido team. Beyond that, we haven't used all features extensively yet, so it's too early to comment on any deeper limitations, but so far nothing has stood out as a major drawback.
What problems is the product solving and how is that benefiting you?
SCA scanning and AI-assisted flows
Information Technology and Services
Easy to use, easy to integrate, and it actually finds things
Reviewed on Sep 21, 2026
Review provided by G2
What do you like best about the product?
Repository scans and the automatic integration with our ticketing service. The scans run continuously across our codebases and surfaced a long backlog of small security issues that had gone unnoticed for years, the kind of thing that would normally take a dedicated audit to catch. The ticketing integration means findings land directly in our existing workflow as tickets instead of sitting in a separate dashboard nobody checks, which has saved us a lot of manual triage.
On top of that, it's genuinely easy to use. Setup was quick and the interface doesn't require a security background, so the whole team engages with it, not just the security-minded folks. And because scans run consistently across all our codebases, it's pushed us toward a shared security standard across projects that used to drift apart, an unexpected win we hadn't set out to get.
Their support has also stood out: quick to respond and genuinely hands on, not just pointing us to documentation but actually helping work through our specific setup.
On top of that, it's genuinely easy to use. Setup was quick and the interface doesn't require a security background, so the whole team engages with it, not just the security-minded folks. And because scans run consistently across all our codebases, it's pushed us toward a shared security standard across projects that used to drift apart, an unexpected win we hadn't set out to get.
Their support has also stood out: quick to respond and genuinely hands on, not just pointing us to documentation but actually helping work through our specific setup.
What do you dislike about the product?
Honestly, nothing significant to flag yet. We're still a few months in and haven't explored every tool in the platform, so there may be gaps we haven't hit, but nothing has gotten in our way so far.
What problems is the product solving and how is that benefiting you?
Aikido is solving the problem of security debt we didn't know we had: small vulnerabilities and issues that had accumulated across our codebases over several years without anyone actively hunting for them. Before using it, that kind of continuous scanning just wasn't happening, so things slipped through unnoticed.
The benefit is twofold. First, we now have visibility we simply didn't have before, and a steady stream of concrete, actionable findings instead of periodic, manual audits. Second, because it scans consistently across all our different codebases, it's helping us enforce a shared security standard across projects that used to be handled inconsistently, which reduces risk without adding extra process overhead for the team.
The benefit is twofold. First, we now have visibility we simply didn't have before, and a steady stream of concrete, actionable findings instead of periodic, manual audits. Second, because it scans consistently across all our different codebases, it's helping us enforce a shared security standard across projects that used to be handled inconsistently, which reduces risk without adding extra process overhead for the team.