Aikido Enhances Docker Security with VEX Integration for Vulnerability Management

Aikido has integrated support for Docker Hardened Images, utilizing VEX attestations to filter out irrelevant CVEs during scans. This new feature reduces the number of flagged vulnerabilities from potentially hundreds to only those that are truly exploitable. Docker's VEX (Vulnerability Exploitability eXchange) provides data on which CVEs are not applicable to specific images, allowing for more efficient security management. Aikido's system suppresses non-exploitable vulnerabilities, ensuring security teams focus on critical issues. The integration aims to address the common problem of alert fatigue among developers, who often encounter overwhelming numbers of CVEs. A live demonstration of this integration is scheduled for June 25, 2026, to showcase its functionality and benefits. This development is expected to enhance container security and compliance efforts significantly.

Key Points: • Aikido now supports Docker Hardened Images with VEX integration. • The integration reduces irrelevant CVEs flagged during scans, improving focus on critical vulnerabilities. • A live demo of the Aikido x Docker integration is scheduled for June 25, 2026.