Hello Hacker News!
We’re Willem, Roeland, Felix and Madeline from Aikido Security (https://aikido.dev/) We’re building a “no BS’ application security platform.
It’s the platform we wish existed, but couldn’t find.Willem, our CTO had to manage (application) security at many of his previous startups, and honestly, hated it.
Most security tools we had to use made us feel dumb. They were super complex and riddled with false positives. Their platform was behind the book a demo button. They had intransparent pricing models and honestly charged us way too much.We think most of these platforms are built for the buyer at corporate companies, the CISO, not for the user, the developer. The people that actually need to use it.So we built a platform that brings all the security scanners you need to secure your app, into one. We’ve built the app to be tech agnostic, it connects to your code (GitHub, GitLab, Azure Devops, Bitbucket,…), cloud (AWS, Azure, GCP, DigitalOcean), docker images (over 15 different types) & domains (any domain ofcourse) and scans them for many different types of security issues and vulnerabilities. E.g. open source dependencies, cloud misconfigurations, secrets, static code issues, IaC misconfigurations, surface monitoring issues, license risks, malware, outdated software,…We’ve been able to do this by leveraging lots of cool open source projects. Great scanners made by awesome communities. (Syft, Gitleaks, Trivy, Grype, Zap, Nuclei, CloudSploit, Checkov, Semgrep, Gosec, Bandit,…) We built on top of those & fixed any gaps, (E.g. Bun lockfile support, Transiitive dependencies for .NET) to make sure we have full coverage. Recently, we also started own open source runtime security solution to give back to the community: https://github.com/AikidoSec/runtime-nodeWe’ve got about 300 paying customers right now. And over 3000 companies using us. Transparant, flat free pricing. Simple free plan for anyone to try.
It takes 3 minutes to onboard to Aikido: https://app.aikido.dev/login
Or you can just try it out with a demo account.Would love to know your thoughts and questions in the comments!TC article: https://techcrunch.com/2024/05/01/belgiums-aikido-lands-17m-...
Users have expressed concerns about GitHub permissions, praised the tool's utility over previous patchwork solutions, complimented the site's design, and inquired about contact methods. A repeated suggestion is to use the 'contact' link on the website. One user acknowledged a bad habit and apologized.
Users have expressed distrust due to the product's request for unnecessary GitHub permissions, a concern that has been raised repeatedly over the past month.