Introducing Aikido Altar: the model that makes sovereign security intelligence possible

GitLab projects have a button labeled "Email work item to this project".

Deel's whole job is making it possible to hire flexibly: whether the people are remote, contractors, or spread across entities and countries you don't personally manage. That flexibility is exactly what makes security hard to keep consistent. Access often outlives the project it was granted for. A package, browser extension or AI skill gets installed on a whim. A new dependency reaches a repo before anyone's reviewed it.

On 23 September 2026, a threat actor published a novel supply chain worm to the following packages:

AWS granted Aikido the Security Competency for Application Security after technical and commercial validation. The platform unifies code, dependency, container, IaC and runtime security checks.

Aikido on the viral a16z chart: critical/high CVEs at 21 top vendors jumped from under 100 to 600+ a month; AI speeds discovery, so remediation capacity, not disclosure volume, is the real problem.

Aikido recaps Jason Haddix's Secure Disclosure episode: he predicts 90% of pentests will be done by AI, argues defenders must fight AI with AI, and says AI solves pentesting's coverage problem.