Aikido Security

Secure everything devs build, ship & run.

Aikido SecuritySep 21, 2026

Secure everything devs build, ship & run.

Aikido Security launch preview
852011.5K517K1.2K

Tags

AI agentB2D (developers)500K-1MExplainerSeries AGlobalOpen sourceOpen source release

TLVC Rating

1.80
Hook
Editing / Creativity
Copy
Sentiment of launch
Distribution strategy

Community Rating

No ratings yet

to rate this launch.

Altar-1 is an open-weight AI model developed to support defensive cybersecurity tasks without requiring organizations to send internal context or source code outside their own environments. Built by Belgian application security company Aikido, it targets security teams that want to run vulnerability discovery and penetration testing workloads on infrastructure they control, with banks with data-residency obligations, healthcare providers handling sensitive patient information, and industrial organizations as clear early buyers. The launch matters because most frontier security tooling still requires shipping code and telemetry to a vendor cloud, and Altar-1 is a working alternative for teams that cannot. Under the hood, Aikido created Altar-1 from Z.AI's open-weight GLM-5.3 model, reducing its storage footprint from 1.51 TB to 328 GB. The company first applied AWQ INT4 quantization, reducing the model to 488.2 GB, then used expert pruning to remove components less relevant to security work, letting the model run on four Nvidia H200 GPUs while retaining 168 of the model's 256 routed experts . In Aikido's own evaluation, Altar-1 was tested against 32 known vulnerabilities spread across 30 repositories, with three runs for each case, and averaged 60.4% recall per run while finding 23 of the 32 vulnerabilities at least once. It powers locally deployed workloads in the Aikido Machine, the company's agent for automated security tasks. Aikido was founded on October 26, 2022 by Willem Delbare, Roeland Delrue, Felix Garriau and Madeline Lawrence, and is headquartered in Ghent, Belgium . The company raised a $17 million Series A in 2024 to expand its developer-facing security platform, and Altar-1 signals a shift from packaging third-party scanners toward training and shipping its own models for security workflows.

Comments (14)

Sign in to join the discussion.
P
Priya Ramanathan19d ago

Open weights for a defensive security model is a spicy call. Curious how you keep it from being reverse-engineered into an offensive one by Tuesday.

K
Kwame O.19d ago

The landing page for Altar-1 loads faster than most of my prod services. Whoever did that build deserves a raise.

H
Hendrik Vos19d ago

ok wait, an open-weight security model from a scanner company? this is the kind of pivot that either prints or ends up in a postmortem thread.

A
Amin Boustani19d ago

This is giving early Sentry meets early HuggingFace. Two of my portfolio founders will be DMing you before EOD.

Y
yuko19d ago

The tweet has zero hook and still pulled numbers. 'Introducing' is doing heavy lifting because the noun after it is actually interesting for once.

M
Marisol Vega19d ago

'Secure everything devs build, ship & run' reads like a checklist. Try: 'Defensive AI you actually own.' You can Venmo me later.

A
Anri Takahashi19d ago

Open-weight is cool but what's the license? If it's one of those 'open until you make money' deals just say so upfront.

D
Dmitri Kovalenko19d ago

Giving away the model weights while running a paid platform is a fun bet. The margin story here is basically 'trust us, the enterprise tier sells itself.'

0
0xNadia19d ago

Open weights plus provenance plus signed inference logs. There is a token in here somewhere, you just haven't found it yet.

P
Paz Alderete19d ago

Before my security team touches this: SOC2 Type II, SSO on the free tier, and a DPA that doesn't require six weeks of redlines. Please and thank you.

R
Reeta Iyer19d ago

Would love to see eval numbers against the usual suspects, or at least a benchmark that isn't cherry-picked from your own repo.

A
Arwa El-Sayed19d ago

Would appreciate a model card with training data provenance and the threat model you optimized for. Otherwise 'defensive' is just marketing.

G
Gunnar Sølberg19d ago

Still running Snyk on a cron job in Jenkins, so I'll check back on this in 2027 when it's stable.

T
Tomasz Reinhold19d ago

Any chance of a briefing on what 'frontier-grade' means here specifically? Happy to keep it under embargo if there's a story.