Published on:
Jun 18, 2026
We partnered with OWASP to give every OWASP individual member 200 free Aikido credits to run Code Audit. In this blog article we explain who qualifies, how to claim the credits, and how to use them for a Code Audit
Every OWASP individual member gets 200 Aikido credits to run Code Audit on their own codebase. The benefit went live on 18 June 2026 and runs for six months.
The benefit is open to OWASP individual members. You can only claim it with your @owasp.org email address, so make sure to have that ready before you start.
You claim the credits in two steps:
If you already signed up with a different email, sign up again with your @owasp.org address so we can match you to the benefit.
Code Audit reads your source code and reasons through it the way an attacker would, following references across files and modules to find the multi-step, logic-layer issues where no single line is the vulnerability. It catches things like IDOR, broken access control, and business logic flaws.
Because Code Audit works on your codebase, you do not need a live application or auth credentials to start. Connect a repository and start an audit. The set-up takes a few minutes, and code audits run in a couple of minuutes, depending on the codebase size and its complexity.
Cost per audit depends on the size and complexity of the repositories you select, and Aikido estimates the credit total before each audit begins.
Last updated on:
Jun 20, 2026
Tired of false positives?
Try Aikido like 100k others.
Start Now
Get a personalized walkthrough
Trusted by 100k+ teams
Book Now
Scan your app for IDORs and real attack paths
Trusted by 100k+ teams
Start Scanning
See how AI pentests your app
Trusted by 100k+ teams
Start Testing
•
Product & Company Updates
SAST catches patterns. Code Audit reasons through your code like an attacker would, finding the logic flaws that only show up after you ship.
•
Product & Company Updates
Aikido now supports Docker Hardened Images with built-in VEX integration, helping teams reduce CVE noise and focus on container vulnerabilities that actually need attention.
•
Product & Company Updates
A year after forking Semgrep, Opengrep is faster, supports deeper taint analysis, and produces consistent, reproducible results.
Secure your code, cloud, and runtime in one central system.
Find and fix vulnerabilities fast automatically.
No credit card required | Scan results in 32secs.
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。