Scandar and Aikido
Aikido is a hosted platform that covers dependencies, code, secrets, cloud, and DAST. Scandar stays on the lockfile and the pull request.
Information verified on 25 October 2026; plans change, check their site.
| Scandar | Aikido | Source | |
|---|---|---|---|
| Developer plan | Prices are whatever Polar is configured to sell on this server, shown on the pricing page. While payments are not set up, every feature is open and every limit is unlimited. The product has no per-developer price of its own. | Developer is listed at $0, “free forever”, and includes 2 users. The page says no credit card is required. | Aikido pricing Verified on 25 October 2026 |
| What Developer includes | Lockfile advisories from OSV.dev and a fix pull request. Not SAST, secrets, cloud, or DAST. | The Developer list includes dependency scanning (SCA) with reachability, license scanning, and autofix; SAST; secrets detection; cloud misconfiguration, container, and IaC checks; DAST; IDE plugins; and rescans every 3 days. | Aikido pricing Verified on 25 October 2026 |
| Developer limits | Public and signed-in scan limits are the ones in this app. They are not a repo or container quota. | The page lists 10 repos, 2 container images, 1 domain, 1 cloud account, 10 AI autofixes per month, and 250k protected requests per month, and it also says “fair-usage limits” without a further number. | Aikido pricing Verified on 25 October 2026 |
| Basic | No matching tier in the product. An admin can add Polar plans. | Basic is displayed as $300/month, labeled “Total fee (incl. 10 users)”. The page also offers 15 and 20 user choices without printing those totals in the text read here. It adds pull-request security review, Jira and Linear sync, Drata and Vanta sync, reports, and code-quality checks. | Aikido pricing Verified on 25 October 2026 |
| Basic limits | See the pricing page on this server for numeric limits. Unlimited while payments are off. | The page lists 100 repos, 50 container images, 3 domains, 3 cloud accounts, unlimited AI autofixes per month, and 10M protected requests per month, plus fair-usage limits. | Aikido pricing Verified on 25 October 2026 |
| Pro | Not a separate product name in the code. | Pro is displayed as $600/month, “Total fee (incl. 10 users)”, with a control for higher user counts. It adds on-prem scanning, virtual-machine scanning, attack-surface monitoring, malware detection, same-day support, and 100 credits per month for AI features such as AI pentesting. The included list shows 200 repos, 100 container images, 10 domains, 10 cloud accounts, 30 VM scaling groups, and 20M protected requests per month. | Aikido pricing Verified on 25 October 2026 |
| Advanced | Not a separate product name in the code. | Advanced is also displayed as $600/month, “Total fee (incl. 10 users)”. It adds a broker for internal apps, a private registry proxy, higher API rate limits (no number on the page), FIPS base images, priority support, SIEM integration, and 200 credits per month. The included list shows 500 repos, 200 container images, 20 domains, 20 cloud accounts, and 50M protected requests per month. | Aikido pricing Verified on 25 October 2026 |
| Taxes, annual billing, enterprise | Tax handling is Polar’s when payments are on. Nothing is invented here. | The page says prices do not include withholding, import, sales, VAT, or other local taxes. The annual control is labeled “10% off”. Enterprise is a separate view described as tailored pricing with FedRAMP moderate. A startup offer says “up to 30% off” with conditions. | Aikido pricing Verified on 25 October 2026 |
Where Scandar fits
- A fix pull request lists each package, the version it moves from and to, whether the change is direct or an override, and the advisory ids. When an explanation is already cached, the pull request adds an “In plain words” section. Opening the page does not call the model.
- Priority uses whether the project imports the package, not only the severity on the advisory.
- One Node process you host. The scan reads the lockfile you already committed.
Where Aikido does more
- The Developer plan lists SAST, secrets detection, cloud misconfiguration checks, container and virtual-machine scanning, IaC, DAST, and IDE plugins. Scandar does not.
- Dependency scanning on that plan lists reachability, license scanning, autofix, and breaking-change notes.
- Basic adds pull-request security review, issue sync to Jira and Linear, and compliance sync to Drata and Vanta.
- Pro adds on-prem scanning, attack-surface monitoring, and malware detection. Advanced adds a private registry proxy and SIEM integration.
Which one to use
Choose Aikido if you want SAST, secrets, cloud, containers, or DAST in one hosted product, including on the free Developer plan.
Choose Scandar if you host the scanner yourself and want the output to be a pull request with a plain-language note when one is cached.