Aikido Security

A tiny repository for binaries, MDM profiles, and anti-tamper rules reveals how enterprise security software gets installed, trusted, and kept running across Windows, macOS, and Linux.

It uses Terraform where orchestration belongs, StackSets where AWS can fan out cleanly, and `moved` blocks to refactor live security roles without a destructive rewrite.

This tiny repo does not scan code itself. It teaches Kiro to stop, check, fix, and rescan before unsafe code can move forward.

zen-internals-node turns eval() and new Function() into a policy check, so Node.js code can be stopped at the instant it tries to become executable.

This Terraform module encodes least privilege, API enablement, and keyless trust into one repeatable GCP handoff.

AikidoSec’s opengrep-rules repository shows how static analysis is moving from code bugs to AI workflow abuse, one YAML file at a time.

A deep dive into the JFrog extension that checks remote packages against live malware intel and blocks suspicious downloads before they land.

How a local proxy intercepts your package manager to manipulate registry metadata and block zero-day supply chain attacks before they hit your disk.