Aikido Autofix
About
Aikido is a Belgian application security platform whose AutoFix feature converts scanner findings into pull requests instead of tickets. For dependency CVEs it groups fixes by repo and lockfile; for SAST findings it previews a full diff that can be applied from the IDE or inline in a PR; for containers it generates three to five Dockerfile patch options across base images, stating what each fixes and risks. Developers refine patches conversationally (different error handling, an added test) before merging, with custom branch names and merge rules. Aikido holds read-only repository access and never pushes directly — one customer reports roughly 200 AutoFixes per month against their backlog. Proprietary SaaS with a free tier and docs at help.aikido.dev.