Edge Rewrite
location Source code View original
// request.cf · coarse context

A page that knows where it met you.

Only coarse request metadata is shown. This demo does not display or persist visitor IP addresses.

Country
US
Cloudflare location
CMH
Connection
HTTP/2
Language
Not provided

Ray ID: a44a1b66ef5cf41a

Jump to content

Aikido Security

From Wikipedia, the free encyclopedia
Aikido Security
TypePrivate
IndustryCybersecurity
FoundedOctober 26, 2022 (2022-10-26)
FoundersWillem Delbare
Roeland Delrue
Felix Garriau
Madeline Lawrence
HeadquartersGhent, Belgium
Websitewww.aikido.dev

Aikido Security BV is a Belgian cybersecurity company headquartered in Ghent. Founded in 2022, it develops a software security platform that analyzes source code, open-source dependencies, cloud infrastructure, applications and devices for vulnerabilities, malware and misconfigurations.[1] Its products include code and dependency analysis, cloud-security assessment, automated penetration testing, vulnerability remediation and runtime protection.[2]

History

[edit]

Aikido Security was incorporated on 26 October 2022 in Ghent by Willem Delbare, Roeland Delrue, Felix Garriau, and Madeline Lawrence.[3] The company's name refers to the Japanese martial art aikido.[4] In January 2023, the company raised €2 million in pre-seed funding.[5] In November 2023, it raised €5 million in a seed funding round co-led by Notion Capital and Connect Ventures.[6]

In May 2024, the company raised $17 million in a Series A funding round led by Singular.[2] In January 2025, Aikido Security co-launched Opengrep, an open-source fork of Semgrep.[7] In August 2025, the company acquired the artificial intelligence (AI) code review startup Trag.[8]

In September 2025, it acquired Allseek and Haicker, the company introduced automated penetration testing under the name “Aikido Attack”.[9] In the same month, Aikido Security researchers reported malicious code in npm packages during a supply chain attack.[10]

On 14 January 2026, the company raised a $60 million Series B at a $1 billion valuation.[3] In February 2026, Aikido introduced Infinite, a product that uses automated agents to conduct penetration testing on successive software releases and propose or validate remediations.[11]

In March 2026, Zach Rice, the creator of Gitleaks, joined Aikido Security and started the open-source project Betterleaks.[12] In April 2026, Aikido launched Device Protection (marketed at launch as Aikido Endpoint), a security agent that inspects and blocks risky packages, extensions, and AI tools on developer devices before installation.[13]

In June 2026, Aikido acquired Root.io, whose technology became part of Aikido Libraries and Aikido Images, providing patched versions of vulnerable dependencies and container images without requiring major upgrades.[14] In August 2026, Aikido partnered with Belfius to deploy Aikido Machine, an on-premises AI penetration-testing server, inside the bank's data center.[15][16]

Products and activities

[edit]

Aikido Security develops application security software that connects to software-development tools and cloud environments, analyzing code, infrastructure, applications, and developer devices, consolidating findings and generating automated fixes for identified issues.[17]

Code and software supply chain

[edit]

Aikido analyzes source code, open-source dependencies, software packages, secrets, and infrastructure-as-code for vulnerabilities and malicious components. Its Aikido Libraries and Aikido Images products, launched following its 2026 acquisition of Root.io, patch vulnerable open-source dependencies and container images without requiring a version upgrade.[14]

Threat intelligence

[edit]

Aikido Intel, the company's threat intelligence engine, identifies malicious packages and vulnerabilities across open-source registries. As of April 2026, it detected roughly 100,000 such packages daily, up from about 20,000 a year earlier.[18]

Cloud and infrastructure

[edit]

Aikido assesses cloud configurations and identifies vulnerabilities in virtual machines, containers, and Kubernetes environments.[19]

Attack testing and runtime protection

[edit]

Aikido provides dynamic application security testing and on-demand AI-assisted penetration testing under the name Aikido Attack.[9][20] Infinite extends this into continuous penetration testing that runs on each software release and validates proposed fixes.[11] Its Device Protection product, launched the same year, runs on individual developer machines and inspects packages, IDE extensions, browser plugins, and AI tools before they are installed, blocking those it identifies as malicious or risky.[13]

Open-source projects

[edit]

In January 2025, Aikido and a group of other companies introduced Opengrep, an open-source fork of the Semgrep code-analysis engine following changes to Semgrep’s licensing and governance.[7] In March 2026, Gitleaks creator Zach Rice joined Aikido and began developing Betterleaks, an open-source secrets-detection project.[12]

Organization

[edit]

The company is headquartered in Ghent, Belgium, and has offices in San Francisco, London, and Chicago.[21]

Security research

[edit]
  • In September 2025, Aikido investigated malicious releases of widely used npm packages following the compromise of a maintainer's account. The affected packages had more than 2.6 billion weekly downloads.[10]
  • In March 2026, Aikido reported malicious components associated with the GlassWorm supply-chain campaign, including 151 affected GitHub repositories.[22]
  • In June 2026, Aikido reported 15 malicious plugins on the JetBrains Marketplace that were designed to steal developers' AI service API keys.[23]
  • In August 2026, Aikido investigated the ChainDrop npm supply-chain attack, which spread through hundreds of packages and targeted developer and cloud credentials.[24]

See also

[edit]

References

[edit]
  1. ↑ "Belgian cybersecurity startup Aikido hits unicorn status with new funding round". Reuters. Retrieved 2026-05-04.
  2. 1 2 "Belgium's Aikido lands $17M Series A for its 'no BS' security platform aimed at developers". TechCrunch. 2024-05-01. Retrieved 2026-05-04.
  3. 1 2 "Aikido Security hits unicorn valuation with $60m Series B raise". Sifted. 2026-01-14. Retrieved 2026-05-04.
  4. ↑ Jonkers, Jens (2025-04-30). "ICT in Belgium: Aikido Speaks the Language of Developers 'without Nonsense'". ITdaily. Retrieved 2026-05-04.
  5. ↑ "Aikido Security raises €2 million to help developers up software defenses". Tech.eu. 2023-01-19. Retrieved 2026-05-04.
  6. ↑ "Ghent-based Aikido Security secures €5M in seed funding round". Tech.eu. 2023-11-14. Retrieved 2026-05-04.
  7. 1 2 "Code-Scanning Tool's License at Heart of Security Breakup". Dark Reading. Retrieved 2026-05-04.
  8. ↑ Novinson, Michael (August 21, 2025). "Aikido Security Buys AI Code Startup Trag to Outpace Rivals". BankInfoSecurity. Retrieved September 16, 2026.
  9. 1 2 "Allseek and Haicker join Aikido to transform penetration testing into sub-hour automated assessments". SiliconANGLE. 2025-09-24. Retrieved 2026-05-04.
  10. 1 2 Gatlan, Sergiu. "Hackers hijack npm packages with 2 billion weekly downloads in supply chain attack". BleepingComputer. Retrieved 2026-05-04.
  11. 1 2 "Aikido Infinite introduces continuous, self-remediating AI penetration testing". Help Net Security. 24 February 2026. Retrieved 16 September 2026.
  12. 1 2 Sawers, Paul (2026-03-27). "Gitleaks creator returns with Betterleaks, an open source secrets scanner for the agentic era". The New Stack. Retrieved 2026-05-04.
  13. 1 2 "Aikido launches Endpoint to secure AI-native developer workflows". Tech.eu. 2026-04-20. Retrieved 2026-09-16.
  14. 1 2 Riley, Duncan (2026-06-30). "Aikido acquires Root to patch open-source software without forced upgrades". SiliconANGLE. Retrieved 2026-09-16.
  15. ↑ Lovable. "FF News - The Fintech News Network". FF News. Retrieved 2026-09-16.
  16. ↑ "Aikido deploys 200+ AI agents inside Belfius data centre | Disrupts". disrupts.disruptsmedia.com. 2026-08-19. Retrieved 2026-09-16.
  17. ↑ Taft, Darryl K. (2026-03-04). "Aikido Security bets on AI to make software secure itself". The New Stack. Retrieved 2026-05-04.
  18. ↑ "Aikido Security Launches Endpoint Protection for Developer Devices as Software Supply Chain Attacks Hit Unprecedented Scale". Cyber Defense Wire. 20 April 2026. Retrieved 16 September 2026.
  19. ↑ CyberSecurity, F. M. "Kubernetes Scanning | Aikido". FM CyberSecurity. Retrieved 2026-09-16.
  20. ↑ "How Aikido Security disrupted appsec to reach unicorn status in 3 years". TechFundingNews. 2026-01-14. Retrieved 2026-05-04.
  21. ↑ "Ghent cyber firm Aikido becomes Belgian tech unicorn after $60m funding round". Belga News Agency. Retrieved 2026-05-04.
  22. ↑ "GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX". BleepingComputer. 17 March 2026. Retrieved 16 September 2026.
  23. ↑ "Fifteen JetBrains Marketplace Plugins Found Stealing API Keys". Infosecurity Magazine. 17 June 2026. Retrieved 16 September 2026.
  24. ↑ "ChainDrop Worm Hits 400+ npm Packages with Two Billion Monthly Installs". Infosecurity Magazine. 5 August 2026. Retrieved 16 September 2026.
[edit]
Retrieved from "https://en.wikipedia.org/w/index.php?title=Aikido_Security&oldid=1376055931"