Aikido

Aikido is a security platform that scans your code, containers, cloud and Kubernetes setup, and gathers what it finds in one place.

Who does what

Working out who does what, and how we can support you best, is one of the things this pilot is for. We start from this:

• The platform’s findings are ours. For what we build and run for you, such as your AWS accounts’ baseline setup and your clusters’ platform components, we fix what Aikido finds, or mark a finding as by design and explain why.
• Your workloads, code and pipelines stay yours. Aikido’s findings on them are yours to act on; we’re there to help you understand and fix them.
• We set up the connections between your platform and your Aikido workspace, in the same infrastructure code and cluster definitions as the rest of your platform, so every change to them gets reviewed. We also keep them up to date.
• We’re your first line of support. As your managed service provider, we’re your first point of contact for anything Aikido: findings, the connections, and users and settings in your workspace. We involve Aikido’s own support when needed. The workspace stays yours; through Aikido’s partner program we can get admin access to it, so we can make those changes for you.

What we connect

• Your AWS accounts. Aikido reads the configuration of your AWS resources and reports misconfigurations, such as public buckets or security groups open to the world. See Connect your AWS accounts to Aikido.
• Your Kubernetes clusters. An agent in your cluster reports misconfigurations and, optionally, vulnerabilities in the images you run. See Connect your cluster to Aikido.

Both connections give Aikido read access to configuration, not to your data. Where Aikido’s own setup would give it more, such as changing which agent version runs in your cluster or reading the content of your resources, we turn that off or make it something you opt in to. Each page lists what Aikido can and can’t see.

Before you connect anything