Flash Uplink LLC v. Aikido Security BV

I. Executive Summary and Procedural Information

• Parties & Counsel:
  • Plaintiff: Flash Uplink LLC (Texas)
  • Defendant: Aikido Security BV (Belgium)
  • Plaintiff’s Counsel: Dematteo Law LLC
• Case Identification: 2:26-cv-00861, E.D. Tex., 09/21/2026
• Venue Allegations: Venue is asserted on the basis that the Defendant is a foreign entity not resident in the United States and may therefore be sued in any judicial district.
• Core Dispute: Plaintiff alleges that Defendant’s cybersecurity software products infringe a patent related to methods for automatically identifying and remediating software vulnerabilities.
• Technical Context: The technology is in the field of automated cybersecurity, specifically using active exploitation techniques to test for and confirm the presence of known vulnerabilities in computer systems.
• Key Procedural History: The complaint does not mention any prior litigation, inter partes review proceedings, or licensing history related to the patent-in-suit.

Case Timeline

Date	Event
2002-11-04	’497 Patent Priority Date
2012-07-24	’497 Patent Issue Date
2026-09-21	Complaint Filing Date

II. Technology and Patent(s)-in-Suit Analysis

U.S. Patent No. 8,230,497 - "Method of Identifying Software Vulnerabilities on a Computer System"

• Patent Identification: U.S. Patent No. 8,230,497, titled “Method of Identifying Software Vulnerabilities on a Computer System,” issued on July 24, 2012.

The Invention Explained

• Problem Addressed: The patent describes conventional vulnerability detection as a slow and costly process that relies on scanning networks to identify software versions and comparing them against a central database of known vulnerabilities ’497 Patent, col. 1:59 - col. 2:9 This method is described as potentially inaccurate and leaving systems exposed while manual remediation is coordinated ’497 Patent, col. 2:9-26
• The Patented Solution: The invention proposes a more direct and automated method. It involves applying an “interrogation program,” which is specifically designed to actively “exploit” a known vulnerability, to a target computer system ’497 Patent, abstract If the exploit succeeds, the program generates “management information” (such as the system’s IP address) and sends it to a central management computer, thereby confirming the vulnerability’s presence with certainty ’497 Patent, col. 2:35-58 The patent further explains that these interrogation programs can be created by modifying actual malicious code, such as a computer virus, by replacing its “malicious part” with a “management part” that safely reports the finding ’497 Patent, col. 8:20-33 ’497 Patent, Fig. 5
• Technical Importance: This approach provided a method for rapid and accurate automated confirmation of vulnerabilities across a network, enabling faster and more reliable remediation before malicious actors could exploit them ’497 Patent, col. 2:50-58

Key Claims at a Glance

• The complaint asserts infringement of one or more claims, with a specific focus on claim 1 ’497 Patent, col. 11:60 - col. 12:18 Compl. ¶13
• The essential elements of independent claim 1, a computer program claim, include:
  • Selecting one or more computer systems to be scanned.
  • Applying an "interrogation program" to the system's software, where the program is "capable of exploiting a known software vulnerability."
  • If the vulnerability is exploited, operating the interrogation program to generate and send management information identifying the computer system.
  • Wherein the interrogation program is "further arranged to remediate the known software vulnerability in response to it being identified."
• The complaint’s broad allegation of infringing "one or more claims" suggests the possibility that dependent claims may also be asserted as the case proceeds Compl. ¶13

III. The Accused Instrumentality

Product Identification

The accused products are Aikido Security Pentest and Infinite/Continuous Pentesting, AutoFix, and AutoShip, along with associated software infrastructure such as repositories and deployment pipelines (collectively, the "Accused Instrumentalities") Compl. ¶10

Functionality and Market Context

• The complaint alleges the Accused Instrumentalities are used for "identifying software vulnerabilities on a computer system" Compl. ¶9 The product names—"Pentest," "AutoFix," and "AutoShip"—suggest a suite of tools for automated security penetration testing, automated remediation of discovered flaws, and integration into a continuous software delivery process.
• The complaint references an "Exhibit A" for a more detailed description of the accused functionality, but this exhibit was not included with the complaint Compl. ¶10 Therefore, the complaint itself does not provide sufficient detail for a full analysis of the accused products' specific technical operations.

IV. Analysis of Infringement Allegations

The complaint alleges that a preliminary claim chart mapping claim 1 of the ’497 Patent to the Accused Instrumentalities is attached as Exhibit A Compl. ¶18 As this exhibit was not provided, the infringement theory is summarized below based on the narrative allegations in the complaint.

The complaint alleges that the Accused Instrumentalities directly infringe by performing a method that mirrors the steps recited in the ’497 Patent (Compl. ¶¶9-10; Compl. ¶14). The core of the infringement theory is that Aikido's products, in combination, perform a method of: selecting computer systems for scanning; "applying an interrogation program capable of exploiting a known software vulnerability"; generating management information identifying the exploited system; and "remediating the vulnerability" Compl. ¶9 This allegation tracks the language of the patent’s claims and summary of the invention, suggesting Plaintiff’s theory is that the "Pentest" products perform the active exploitation and reporting steps, while the "AutoFix" product performs the claimed remediation step Compl. ¶10 ’497 Patent, cl. 1

No probative visual evidence provided in complaint.

Identified Points of Contention

• Technical Question: A central factual dispute may arise over the precise operation of Aikido's "Pentest" product. The analysis will likely focus on whether this product functions by actively attempting to "exploit" vulnerabilities as the patent requires, or if it uses a non-infringing method such as checking software version numbers against a vulnerability database, a technique the patent sought to improve upon ’497 Patent, col. 1:59 - col. 2:9
• Scope Question: Claim 1 requires that the "interrogation program is further arranged to remediate" the vulnerability. A question of claim scope is whether this language requires the exploitation and remediation functions to be part of a single, integrated program, or if it can read on a system where separate but connected products, such as Aikido's "Pentest" and "AutoFix," perform these functions sequentially.

V. Key Claim Terms for Construction

The Term: "interrogation program"

• Context and Importance: This term is foundational to the patent's scope. Its construction will determine whether the claims are limited to a narrow class of active exploit tools or cover a broader range of vulnerability scanners. Practitioners may focus on this term because the infringement analysis hinges on whether Aikido’s "Pentest" tool qualifies as an "interrogation program."
• Intrinsic Evidence for a Broader Interpretation: The specification suggests the term can encompass various forms of code, including a simple "URL or 'http' request" ’497 Patent, col. 2:60-62, which could support a construction not strictly limited to complex exploit code.
• Intrinsic Evidence for a Narrower Interpretation: The specification consistently describes the program as being "capable of exploiting a known software vulnerability" ’497 Patent, abstract ’497 Patent, col. 2:40-41 It also provides a specific example of creating such a program by reverse-engineering a malicious computer virus and replacing the "malicious part" with a "management part" ’497 Patent, col. 8:20-33 This could support a narrower construction requiring a functional, active exploit capability.

The Term: "wherein the interrogation program is further arranged to remediate"

• Context and Importance: This clause in claim 1 links the act of identifying a vulnerability with the act of fixing it. The interpretation of how tightly these two functions must be integrated is critical for infringement. Practitioners may focus on this term because Aikido’s accused functionality appears to be delivered via separate products named "Pentest" and "AutoFix" Compl. ¶10
• Intrinsic Evidence for a Broader Interpretation: One embodiment in the patent describes a modified exploit program (E₁') that includes a "remediation payload" (R₁) as an additional part ’497 Patent, Fig. 9 ’497 Patent, col. 10:38-42 This could support an interpretation where the remediation function is simply packaged with the interrogation program, allowing for a sequential but still integrated operation.
• Intrinsic Evidence for a Narrower Interpretation: The claim language states the interrogation program itself is "arranged to remediate." Furthermore, a separate embodiment shows the management computer sending a remediation payload only after receiving a report from the initial interrogation program ’497 Patent, Fig. 12 The existence of this alternative embodiment, which appears to fall outside the direct language of claim 1, may support a narrower construction requiring the remediation capability to be an inherent function of the single "interrogation program" that performs the exploit.

VI. Other Allegations

Indirect Infringement

The complaint alleges both induced and contributory infringement. Inducement is based on allegations that Aikido provides customers with instructions, product manuals, and marketing that encourage use of the Accused Instrumentalities in an infringing manner Compl. ¶16 Contributory infringement is based on allegations that the accused components are not staple articles of commerce, have no substantial non-infringing uses, and are especially made for use in the infringement Compl. ¶17

Willful Infringement

The complaint alleges that Aikido performs its infringing acts with knowledge of the ’497 Patent, "at least as of the date of this Complaint" Compl. ¶16 Compl. ¶17 This allegation forms the basis for a claim of willful infringement, which, if proven, would likely apply to infringement occurring after the complaint was filed.

VII. Analyst’s Conclusion: Key Questions for the Case

• A key evidentiary question will be one of technical operation: Does Aikido’s "Pentest" product function by running code that actively "exploits" a known software vulnerability, as required by the patent, or does it rely on indirect methods like software version analysis, which the patent explicitly distinguishes itself from?
• A core issue will be one of claim scope: Can claim 1, which requires the "interrogation program" to also be "arranged to remediate" the vulnerability, be construed to cover a suite of integrated but distinct products (e.g., "Pentest" and "AutoFix"), or does it require that the exploitation and remediation functions reside within a single, monolithic program?
• The case may also turn on a question of definitional scope: Will the term "interrogation program" be interpreted broadly to include various security testing tools, or will it be narrowly construed to mean only programs that incorporate a functional exploit derived from or mimicking malicious code, as detailed in the patent's specification?