Aikido Security

Aikido Security is a developer-first all-in-one application security platform that consolidates SAST, SCA, secret detection, container scanning, IaC scanning, CSPM, DAST, API security, malware detection, cloud posture, and AI pentesting into a single product designed for engineering teams. Aikido exposes a public REST API at apidocs.aikido.dev covering issues, code repositories, cloud resources, containers, domains and APIs, compliance (SOC2, ISO 27001, NIS2, CIS), custom SAST rules, AI pentesting, task tracking, webhooks, user and team management, Zen app-protection configuration, and activity logging.

Aikido Security publishes 12 APIs on the APIs.io network, including Clouds API, Code Repositories API, Compliance API, and 9 more. Tagged areas include AI Pentesting, API Security, Application Security, Cloud Security, and Compliance.

Aikido Security’s developer surface includes authentication, documentation, signup flow, pricing, engineering blog, and 14 more developer resources.

🌐 Visit website 📡 Source on GitHub

37.2/100 thin ▬ flat Agent 20/100 agent aware saas Full breakdown ↓
scored 2026-09-08 · rubric v0.20.0

AccessFreeSelf serve⚡ Free to try

1 APIs

AI PentestingAPI Security Application Security Cloud Security Compliance DAST Developer-FirstIaC ScanningSAST SCASecret Detection

Kin Score

Kin Score How this is scored →
scored 2026-09-08 · rubric v0.20.0

Composite quality — 37.2/100 · thin

Contract Quality 11.6 / 23

Developer Ergonomics 3.9 / 18

Access Clarity 9.0 / 18

Operational Transparency 3.7 / 12

Contract Governance 0.0 / 11

Discoverability 6.0 / 9

Create-or-Update Ergonomics 0.0 / 10

Agent readiness — 20/100 · agent aware

Machine-Readable Contract 18 / 18

Agentic Access Contract 10 / 10

Documented Reversibility 0 / 6

MCP Server 0 / 12

Machine-Readable Auth 10 / 10

Idempotency 0 / 9

Stable Error Semantics 0 / 8

Request/Response Examples 0 / 7

Rate-Limit Signaling 7 / 7

Typed Event Surface 0 / 6

Agent Skills 0 / 5

Well-Known Catalog 0 / 4

Consent & Bot Identity 0 / 3

A2A Agent Card 0 / 8

Dry-Run / Simulate Mode 0 / 4

Delegated User Identity 0 / 6

Protected Resource Metadata 0 / 5

Registration Without a Human 0 / 6

Agentic Commerce Well-Known Document 0 / 5

Create-or-Update Ergonomics applies to this provider. This API accepts writes, so it carries 10 points of the composite. It is scored from the published contracts themselves: whether a caller can create-or-update in one call, whether the write accepts a key the caller already holds, and whether the response says which branch ran. Without that, every write needs a search-and-branch in front of it, and the first time that check is skipped a duplicate record is created. Scored against the observed mean rather than raw — a provider at the catalog average is unchanged by this facet, not penalised by it.

Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. Every facet and dimension name above is a link: it opens that measurement's own page — what it means, the exact checks that feed it, how the whole catalog distributes on it, and the providers at the top of it. This rating is computed from github.com/api-evangelist/aikido-security: open an issue to ask a question, or submit a pull request to add artifacts. Submit an artifact on GitHub — free → Manage your own listing — the Influence plan, $499/mo →

APIs 12

Individual APIs this provider publishes, each with its own machine-readable definition.

Aikido Security Clouds API

The Clouds API from Aikido Security — 7 operation(s) for clouds.

Aikido Security Code Repositories API

The Code Repositories API from Aikido Security — 4 operation(s) for code repositories.

Aikido Security Compliance API

The Compliance API from Aikido Security — 5 operation(s) for compliance.

Aikido Security Containers API

The Containers API from Aikido Security — 3 operation(s) for containers.

Aikido Security Custom Rules API

The Custom Rules API from Aikido Security — 2 operation(s) for custom rules.

Aikido Security Domains API

The Domains API from Aikido Security — 3 operation(s) for domains.

Aikido Security Issues API

The Issues API from Aikido Security — 6 operation(s) for issues.

Aikido Security Teams API

The Teams API from Aikido Security — 2 operation(s) for teams.

Aikido Security Users API

The Users API from Aikido Security — 2 operation(s) for users.

Aikido Security Webhooks API

The Webhooks API from Aikido Security — 2 operation(s) for webhooks.

Aikido Security Workspace API

The Workspace API from Aikido Security — 2 operation(s) for workspace.

Aikido Security Zen API

The Zen API from Aikido Security — 2 operation(s) for zen.

Scroll for all 12

Open Collections 14

Open, tool-agnostic API collections (OpenAPI-derived and Bruno).

API Collection

OPEN COLLECTION

Aikido Security Public REST Clouds API

OPEN COLLECTION

Aikido Security Public REST Clouds Code Repositories API

OPEN COLLECTION

Aikido Security Public REST Clouds Compliance API

OPEN COLLECTION

Aikido Security Public REST Clouds Containers API

OPEN COLLECTION

Aikido Security Public REST Clouds Custom Rules API

OPEN COLLECTION

Aikido Security Public REST Clouds Domains API

OPEN COLLECTION

Aikido Security Public REST Clouds Issues API

OPEN COLLECTION

Aikido Security Public REST Clouds Teams API

OPEN COLLECTION

Aikido Security Public REST Clouds Users API

OPEN COLLECTION

Aikido Security Public REST Clouds Webhooks API

OPEN COLLECTION

Aikido Security Public REST Clouds Workspace API

OPEN COLLECTION

Aikido Security Public REST Clouds Zen API

OPEN COLLECTION

Aikido Security Public REST API

OPEN COLLECTION

Scroll for all 14

Pricing Plans 1

Published pricing tiers and plan structures.

Aikido Security Plans Pricing

1 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Aikido Security Rate Limits

2 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Aikido Security Finops

FINOPS

Security Posture 4

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Aikido Security Authentication

http · 1 scheme

SECURITY

Aikido Security Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Aikido Security Vulnerability Disclosure

Intigriti · security.txt · contact published

SECURITY

Aikido Security Trust Center

SOC 2, ISO 27001

SECURITY

Agentic Access 1

Recommended x-agentic-access execution contracts for AI agents.

Aikido Security Agentic Access

50 operations · 24 acting

AGENTIC

Resources

Get Started 2

Portal, sign-up, and the first successful call

Login

Signup

Signup

Documentation 2

Reference material describing how the API behaves

Documentation

Documentation

APIDocumentation

APIDocumentation

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

AgenticAccess

AgenticAccess

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization

GitHubOrganization

Access & Security 5

Authentication, authorization, and security posture

TrustCenter

TrustCenter

VulnerabilityDisclosure

VulnerabilityDisclosure

DomainSecurity

DomainSecurity

Authentication

Authentication

TrustCenter

TrustCenter

Operate 1

Status, limits, changes, and where to get help

StatusPage

StatusPage

Commercial 1

Pricing, plans, and the legal terms of use

Pricing

Pricing

Company 5

The organization behind the API

Website

Blog

AboutUs

Careers

LinkedIn

Other 1

Properties that don't map to a standard resource type

Customers

Customers

Source (apis.yml)

aid: aikido-security
name: Aikido Security
description: Aikido Security is a developer-first all-in-one application security platform that consolidates SAST, SCA, secret
  detection, container scanning, IaC scanning, CSPM, DAST, API security, malware detection, cloud posture, and AI pentesting
  into a single product designed for engineering teams. Aikido exposes a public REST API at apidocs.aikido.dev covering issues,
  code repositories, cloud resources, containers, domains and APIs, compliance (SOC2, ISO 27001, NIS2, CIS), custom SAST rules,
  AI pentesting, task tracking, webhooks, user and team management, Zen app-protection configuration, and activity logging.
kind: company
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: true
  label: Hosted service · you call their endpoint
  confidence: high
  source:
  - openapi
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: free
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Free · Self-serve signup
  confidence: medium
  source:
  - plans
  - authentication
  - security
  generated: '2026-09-03'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/aikido-security.png
tags:
- AI Pentesting
- API Security
- Application Security
- Cloud Security
- Compliance
- DAST
- Developer-First
- IaC Scanning
- SAST
- SCA
- Secret Detection
url: https://raw.githubusercontent.com/api-evangelist/aikido-security/refs/heads/main/apis.yml
created: '2026-05-23'
modified: '2026-05-23'
specificationVersion: '0.23'
apis:
- aid: aikido-security:aikido-security-clouds-api
  name: Aikido Security Clouds API
  description: The Clouds API from Aikido Security — 7 operation(s) for clouds.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Clouds
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-clouds-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-code-repositories-api
  name: Aikido Security Code Repositories API
  description: The Code Repositories API from Aikido Security — 4 operation(s) for code repositories.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Code Repositories
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-code-repositories-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-compliance-api
  name: Aikido Security Compliance API
  description: The Compliance API from Aikido Security — 5 operation(s) for compliance.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Compliance
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-compliance-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-containers-api
  name: Aikido Security Containers API
  description: The Containers API from Aikido Security — 3 operation(s) for containers.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Containers
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-containers-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-custom-rules-api
  name: Aikido Security Custom Rules API
  description: The Custom Rules API from Aikido Security — 2 operation(s) for custom rules.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - CustomRules
  tags_raw:
  - Custom Rules
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-custom-rules-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-domains-api
  name: Aikido Security Domains API
  description: The Domains API from Aikido Security — 3 operation(s) for domains.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Domains
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-domains-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-issues-api
  name: Aikido Security Issues API
  description: The Issues API from Aikido Security — 6 operation(s) for issues.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Issues
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-issues-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-teams-api
  name: Aikido Security Teams API
  description: The Teams API from Aikido Security — 2 operation(s) for teams.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Team
  tags_raw:
  - Teams
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-teams-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-users-api
  name: Aikido Security Users API
  description: The Users API from Aikido Security — 2 operation(s) for users.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - User
  tags_raw:
  - Users
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-users-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-webhooks-api
  name: Aikido Security Webhooks API
  description: The Webhooks API from Aikido Security — 2 operation(s) for webhooks.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Webhook
  tags_raw:
  - Webhooks
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-webhooks-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-workspace-api
  name: Aikido Security Workspace API
  description: The Workspace API from Aikido Security — 2 operation(s) for workspace.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Workspace
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-workspace-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
- aid: aikido-security:aikido-security-zen-api
  name: Aikido Security Zen API
  description: The Zen API from Aikido Security — 2 operation(s) for zen.
  humanURL: https://apidocs.aikido.dev/reference/introduction
  tags:
  - Zen
  properties:
  - type: OpenAPI
    url: openapi/aikido-security-zen-api-openapi.yml
  - type: Documentation
    url: https://apidocs.aikido.dev/
  - type: APIReference
    url: https://apidocs.aikido.dev/reference/introduction
  - type: Authentication
    url: https://apidocs.aikido.dev/reference/authorization
  - type: LlmsText
    url: https://apidocs.aikido.dev/llms.txt
  - type: RateLimits
    url: https://apidocs.aikido.dev/reference/rate-limiting
common:
- type: AgenticAccess
  url: agentic-access/aikido-security-agentic-access.yml
- type: TrustCenter
  url: security/aikido-security-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/aikido-security-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/aikido-security-domain-security.yml
- type: Authentication
  url: authentication/aikido-security-authentication.yml
- type: Website
  url: https://www.aikido.dev/
- type: Documentation
  url: https://help.aikido.dev/
- type: APIDocumentation
  url: https://apidocs.aikido.dev/
- type: Login
  url: https://app.aikido.dev/login
- type: Signup
  url: https://app.aikido.dev/signup
- type: Pricing
  url: https://www.aikido.dev/pricing
- type: TrustCenter
  url: https://trust.aikido.dev/
- type: StatusPage
  url: https://status.aikido.dev/
- type: Blog
  url: https://www.aikido.dev/blog
- type: Integrations
  url: https://www.aikido.dev/integrations
- type: Customers
  url: https://www.aikido.dev/case-studies
- type: AboutUs
  url: https://www.aikido.dev/about
- type: Careers
  url: https://www.aikido.dev/careers
- type: GitHubOrganization
  url: https://github.com/AikidoSec
- type: LinkedIn
  url: https://www.linkedin.com/company/aikido-security/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com

Work with this as data

Every provider here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for providers

9 MCP tools reach this

find_providersBrowse and filter every provider in the catalog.
get_provider_artifactsEvery artifact this provider publishes, grouped by type.
get_provider_operationsEvery operation across all of their OpenAPIs — one call instead of parsing every spec.
get_provider_toolsEvery MCP tool they ship, with the operation each wraps.
get_provider_evidenceHow each part of their score was established. Free — the basis for a claim should not sit behind it.
get_provider_ratingPRO — composite, band, trend and facet scores.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This provider

curl "https://apis.io/api/v1/providers/aikido-security"

All providers

curl "https://apis.io/api/v1/providers?limit=25"

Every operation they expose

curl "https://apis.io/api/v1/providers/aikido-security/operations?limit=25"

How their score was established

curl "https://apis.io/api/v1/providers/aikido-security/evidence"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.