Aikido Security Gains FedRAMP Moderate Authorization
Summary
Aikido Security says its platform helped it achieve FedRAMP Moderate authorization. It is offering federal agencies vulnerability triage and remediation capabilities, alongside a separate on-premises option for workloads kept within customer infrastructure.
Key points
- Aikido announced that it has achieved FedRAMP Moderate authorization and offers its Aikido for Government SaaS platform to federal agencies.
- The company says its workflow uses AutoTriage to prioritize vulnerabilities and AutoFix to produce fixes, including backports where possible.
- Aikido says it used its own platform, with daily scans from FedRAMP-as-a-Service partner Knox, to support its authorization effort.
- Aikido says its Intel service identifies potential security fixes in open-source project changes, which its research team validates before advisories are issued.
- The company also describes Aikido Machine as an on-premises option for AI pentesting and code analysis, including air-gapped deployments.
Article Details
- Event Type
- Aikido Security announced that it achieved FedRAMP Moderate authorization.
- Impact
- The authorization enables US federal agencies to use Aikido's government SaaS offering for vulnerability triage and remediation. Aikido says its platform can analyze exploitability and produce validated fixes, and reports that its own team used the platform during the authorization process.
People
Vendors
Products
Aikido for GovernmentAikido for Government, Aikido’s separate US government edition, gets agencies off this CVE treadmill because while AI has commoditized CVE detection and exploitation capabilities, our AI-native platform is built toAikido IntelSLAs also appear upstream. NIST’s own CVE pipeline has fallen behind the volume of new submissions. Aikido Intel steps up to fill the void left by NIST. It watches how open-source projects actually change, catchingAikido LibrariesAutoFix drew on Aikido Libraries, secured drop-in replacements for vulnerable packages, and used Aikido-built images, including FIPS-compliant images, to produce a fix, backported into the version already runningAikido Machineis providing these new capabilities in a format that works for the most sensitive workloads: on-prem. Aikido Machine already runs live AI pentesting and code analysis entirely inside a customer’s own infrastructureAikido-built imagesAutoFix drew on Aikido Libraries, secured drop-in replacements for vulnerable packages, and used Aikido-built images, including FIPS-compliant images, to produce a fix, backported into the version already runningAltarThat knowledge empowered us to build Altar, our first open-weight security model. It is purpose-built to run entirely on Aikido Machine’s hardware, so its reasoning and target codebase never has to leave the environmentAutofixnew CVE, triages it via AutoTriage, analyzes real-world exploitability, and produces a validated fix via AutoFix (backported where needed) end-to-end.AutoShipAutoShip pushed the fix through for reviewAutoTriageis built to actually fix CVEs and cloud misconfigrations. Aikido flags a new CVE, triages it via AutoTriage, analyzes real-world exploitability, and produces a validated fix via AutoFix (backported where needed)