Aikido launches Noon: workforce security for every employee

Aikido has expanded its security offerings beyond developer-centric tools with the launch of Noon, a workforce security platform. This move addresses the reality that human error remains a primary vulnerability, with 62% of recent breaches involving human interaction. The platform targets the evolving nature of social engineering, noting that AI-native attacks—including deepfakes and multi-channel campaigns involving phone calls and texts—are increasingly effective compared to traditional email phishing.
Noon consolidates email security, endpoint device protection, and AI governance into a single interface. It specifically monitors the proliferation of AI tools and MCP servers on corporate devices to prevent sensitive data leaks. The platform was developed by integrating the capabilities of Cyberly, which specialized in attack simulations and AI visibility, and Outkept, which focused on email security and awareness training. The goal is to move away from disruptive security tools toward a continuous, integrated learning and protection model for all employees.

* Aikido launched a new platform called Noon.
* Noon provides email security, device protection, AI governance, and phishing simulations.
* Humans were involved in 62% of breaches in the last year.
* 41% of social engineering breaches used channels other than email.
* Phone-based social engineering is approximately 40% more effective than email phishing.
* Employee regular use of AI on corporate devices has tripled in one year.
* Noon integrates technology from Cyberly and Outkept.
* Aikido acquired or partnered with Cyberly in September.
* Noon's AI governance features identify used models, MCPs, and AI tools.
* Training simulations include phishing, vishing, smishing, and deepfakes.
* Lessons are delivered via Noon, Slack, Teams, or Google Chat.

The strongest version of this narrative is that the rapid democratization of AI has fundamentally broken traditional security perimeters, turning the "human element" from a manageable risk into a high-velocity attack vector that requires an AI-native defense.
However, the delivery follows a classic vendor-driven persuasion arc. It opens by amplifying a sense of urgency—specifically the "much, much worse" trajectory of AI attacks—to create a psychological need for the solution. By citing its own integrated research and the expertise of acquired entities as the primary justification for the product's existence, the narrative positions the vendor as both the alarm-bell and the only viable fire extinguisher.
Patterns detected: ARC-0021 Fear Appeal, ARC-0034 Authority Game
The driving paradigm is "Security as Governance." It assumes that the solution to human vulnerability is increased visibility and more sophisticated simulation. This echoes the historical shift from static firewalls to "Zero Trust" architectures, where the assumption is that the internal user is already a potential threat. The second-order consequence is a further erosion of trust between employees and IT departments, as monitoring extends into AI prompt behavior and "agent skills."
Who benefits? The security provider and the CISO who gains centralized control. Who bears the cost? The employee, whose daily interactions with AI tools are now subject to automated governance and simulated "attacks" as training.
Bridge Questions:
1. If phishing simulations become as sophisticated as actual AI attacks, does the training build resilience or simply increase employee anxiety and distrust of all digital communication?
2. What is the privacy trade-off when "AI governance" involves monitoring specific prompts and tool usage across a workforce?
Counterstrike Scan: A coordinated influence campaign would use "fear-mongering about AI deepfakes" to push a proprietary surveillance tool. While the content uses emotive language, it is a standard B2B product launch; it aligns with marketing norms rather than a deceptive influence operation.