Aikido Security

Excellent simple integration and a great dashboard. The superb mechanism that prevents false positives and ignores findings that are not valid vulnerabilities. Good SAST and SCA mechanisms. DAST is still upgrading, but it is helpful now.

Slack notifications can be more informative :-) But weekly digests are fine!

Aikido's biggest benefit is their ease-of-use. You can literally get started in 2 minutes. Findings are actually useful and have a good resolve advise.

Right now it's mainly static code checks. I would love to see the addition of real time cloud event detection.

Simple, quick setup, for a (monthly) fixed fee.
Contains a rich feature set, which is difficult to all find combined in one other tool.

The inability to connect our ticket service (shortcut.com)

Aikido provides an all-in-one solution, including several features that I was used to get from different tools, either SaaS or open-source software I had to run manually.

Aikido provides a comprehensive security overview of your applications and infrastructures, in a clear and efficient dashboard, with some powerful features like automatically filtering out non-relevant vulnerabilities (e.g. filtering out vulnerabilities from dependencies that may have no impact due to the context they're used in - backend or frontend, dev deps...).

Not having done the setup of the cloud, I'm not clear yet on what controls it provides and how this can help me secure my cloud.

Also, while the free plan is quite generous, the first paid level is a bit high (250$/mo for up to 10 users) and maybe a more accessible plan would be appreciated. Though if you're a startup you can benefit from a discount up to 50% :)

Gives us peace of mind, and compliance (including integrations with compliance software) for less money than the competition.

It's an early-stage product, so expect it to be missing some features, or have some areas for improvement.