Aikido: Is a Single DevSecOps Tool Possible?

DevOps and Docker Talk: Cloud Native Interviews and Tooling

Content provided by Bret Fisher. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Bret Fisher or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

12M ago 1:03:34

MP3•Episode home

Fetch error

Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on October 09, 2025 17:11 (2M ago)

What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.

Or watch the video version on YouTube. Bret is joined by Willem Delbare and Roeland Delrue to discuss Aikido, a security tool consolidation platform designed specifically for smaller teams and solo DevOps practitioners.

🙌 My next course is coming soon! I've opened the waitlist for those wanting to go deep in GitHub Actions for DevOps and AI automation in 2025. I'm so thrilled to announce this course. The waitlist allows you to quickly sign up for some content updates, discounts, and more as I finish building the course. https://learn.bretfisher.com/waitlist🍾

The discussion explores how Aikido addresses the growing challenges of software supply chain security by bringing together various security tools - from CVE scanning to cloud API analysis - under a single, manageable portal. Unlike enterprise-focused solutions, Aikido targets the needs of smaller teams and individual DevOps engineers who often juggle multiple responsibilities. During the episode, they demonstrate Aikido's capabilities using Bret's sample GitHub organization, and show how teams can implement comprehensive security measures without managing multiple separate tools.

There's also a video version on YouTube.

★Topics★
Aikido website
Aikido on Bluesky
Aikido on LinkedIn

Creators & Guests

Cristi Cotovan - Editor
Beth Fisher - Producer
Bret Fisher - Host
Willem Delbare - Guest
Roeland Delrue - Guest

(00:00) - Intro
(06:20) - Aikido Origin Story
(12:09) - What Does AutoFix Mean?
(14:55) - Security Automation and Developers
(23:09) - Lessons from Onboarding Customers
(24:47) - Reducing Noise and Alert Fatigue with Aikido
(29:07) - Aikido in the CI/CD Process
(33:03) - AI Security Integration
(34:01) - GitHub Actions and Dependencies as Attack Vector
(40:57) - Dependencies in Programming Languages
(43:07) - Infrastructure as Code and Cloud Security
(49:54) - Runtime Protection with Aikido Zen
(56:02) - Agent Involvement in Scanning
(59:31) - Tools to Use Alongside Aikido
(01:02:53) - Getting Started with Aikido

You can also support my free material by subscribing to my YouTube channel and my weekly newsletter at bret.news!

Grab the best coupons for my Docker and Kubernetes courses.
Join my cloud native DevOps community on Discord.
Grab some merch at Bret's Loot Box
Homepage bretfisher.com

189 episodes