Aikido Security Says It Achieved ISO 42001 Certification

Summary
Aikido Security says it achieved ISO 42001:2023 certification for AI governance across its platform. The article describes the audit process and scope, while noting the certification covers governance systems, not the safety of individual AI models or outputs.
Key points
- Aikido says the certification covers governance of risks introduced by its AI-enabled platform features.
- The standard calls for defined system boundaries, governance roles, risk and impact assessments, AI behavior monitoring, and remediation processes.
- The company describes a readiness review followed by documentation and control-testing audit stages; nonconformities must be addressed or have a documented remediation plan.
- Aikido says the scope includes its AI-enabled security features and that future AI features will follow the same audited processes.
- The certification assesses the AI governance management system; it does not certify that individual models or outputs are safe.
- The article presents the certification as an assurance signal for organizations evaluating AI-enabled security vendors.
Article Details
- Event Type
- Aikido Security announced that it achieved ISO 42001:2023 certification for AI governance.
- Impact
- The certification confirms that Aikido has an independently audited management system for governing risks introduced by its AI-enabled features across its platform. It does not certify that any individual AI model or output is safe.
Vendors
Products
Aikido Attacksuite of AI-enabled features across the platform, spanning both software and hardware: AI pentesting (Aikido Attack, Aikido Infinite), on-prem AI pentesting (Aikido Machine), Code Security Audit, Deep PR Review, APIAikido Infinitefeatures across the platform, spanning both software and hardware: AI pentesting (Aikido Attack, Aikido Infinite), on-prem AI pentesting (Aikido Machine), Code Security Audit, Deep PR Review, API scanning, AikidoAikido Machineboth software and hardware: AI pentesting (Aikido Attack, Aikido Infinite), on-prem AI pentesting (Aikido Machine), Code Security Audit, Deep PR Review, API scanning, Aikido Libraries, Aikido Images, AutoFix,Code Security AuditFor example, Aikido’s AI pentesting reasons through applications the way an attacker would, while Code Security Audit reasons over source code to catch what pattern-based tools don't. We have various other AI tools
