Running Aikido as a service, Security Tools

Aikido Agency Implementation, Air-Gapped Penetration Testing for Regulated Enterprise

Learn how to position and deliver Aikido's continuous penetration testing as a recurring retainer service for enterprises in regulated industries that cannot use cloud-based security tools. This course covers on-premises deployment, attack surface mapping, exploit chain validation, and automated remediation workflows to build a defensible security practice for compliance-bound clients.

Open the decision record for Aikido

What does running Aikido for clients commit you to?

Published figures for this service. Blank fields are not published.

Monthly tool cost
Not published, vendor pricing is flat-fee but the actual amount and hardware costs are not disclosed in the provided data. Contact Aikido for a quote.
Time to first value
Not published
Payback
Not modeled
Guided implementation
16 hours
Effort with the SOP
6 of 10

Is Aikido worth running as a client service?

Aikido Machine enables continuous, on-premises AI pentesting for regulated and air-gapped environments, with confirmed exploits and ready-to-merge fixes. Vendor pricing is flat-fee but undisclosed, and client pricing must be determined by the agency after accounting for hardware, labor, and market factors.

An agency-fit judgement for reselling this service. It is separate from the tool description on the decision record.

Before you start

What has to be in place before the first client engagement.

Tools and subscriptions

  • Aikido Machine 4U GPU server (on-premises hardware)
  • Client application source code, runtime, and dependency data
  • Access to login pages and exposed endpoints for testing
  • Air-gapped update mechanism (whitelisted domain or encrypted USB)

People and inputs

  • On-premises data center or private cloud infrastructure with GPU support
  • Security engineers to triage confirmed exploits and coordinate fixes
  • Process for delivering and verifying ready-to-merge pull requests
  • Ongoing monitoring for continuous pentest results

Lessons in this course

7 lessons on running Aikido for clients.

  1. 01Why Aikido Machine Turns Compliance Budgets Into Agency RetainersStrategy
  2. 02Aikido Air-Gap Qualification GateConcept
  3. 03When to Adopt Aikido: Client Data Residency Rules Block Cloud PentestingEvaluation Rule
  4. 04Aikido: Buy vs Skip (On-Prem Continuous Pentest for Regulated Clients)Decision Framework
  5. 05Why Agencies Fail With Aikido in Air-Gapped Client EnvironmentsFailure Pattern
  6. 06Aikido Regulated-Client Pentest Retainer (7-10 days)Implementation Blueprint
  7. 07Aikido Machine Client Onboarding (Onboarding)Operating Procedure

Included with the course

7 working documents for delivering this service.

  • Aikido Deployment Checklist for Air-Gapped Networkschecklist
  • Continuous Penetration Testing Retainer Proposal Templatetemplate
  • Attack Surface Enumeration and Exploit Chain SOPsop
  • Compliance Documentation Worksheet (SOC 2, ISO 27001)worksheet
  • Pull Request Remediation Validation Guideguide
  • Legacy System Testing Scope Matrix (COBOL, Mainframe)worksheet
  • Client Onboarding SOP for GPU Server Configurationsop

Listed by name. These documents are not yet published as individual downloads.