Belgian cybersecurity unicorn Aikido Security has announced its acquisition of Israeli AI security firm Root in a deal estimated to be worth between $70 million and $100 million. This strategic purchase aims to bolster Aikido's capabilities in securing open-source software components against supply chain attacks. As part of the integration, Aikido will establish a new development center in Israel, incorporating all of Root's existing employees.
A Strategic Move in Supply Chain Security
The acquisition addresses the escalating threat of software supply chain attacks, where open-source components are a primary target for malicious actors. Critical vulnerabilities, such as the infamous Log4Shell, often remain unpatched in production systems for years, creating persistent risks. The increasing use of AI by attackers to exploit these weaknesses has made rapid and effective remediation more crucial than ever for organizations.
Aikido CEO Willem Delbare highlighted the dilemma companies face between risky version upgrades and proprietary vendor replacements. Root's technology offers a compelling alternative by generating verified patches for the software versions teams are actively running. This approach eliminates breaking changes and complex migrations, aiming to solve supply chain security for a broader market.
Integrating Technology and Talent
The integration will see Root's team of approximately 25 employees form the core of Aikido's new Israeli development hub. Root, which began as Slim.AI and developed the popular Slim Toolkit, had previously raised $31 million from notable investors including Insight Partners. The company was recently recognized by Gartner as an emerging vendor in automated vulnerability remediation.
This acquisition is the latest in a series for Aikido, which recently became the fastest European cybersecurity company to achieve unicorn status. The company secured a $60 million Series B funding round earlier this year, reaching a $1 billion valuation. Its unified security platform is trusted by over 100,000 teams globally, including high-profile clients like Revolut and the Premier League.
Commitment to the Open Source Community
A key aspect of this merger is a commitment to the broader developer community, setting a new industry precedent. Aikido announced it will contribute backported fixes for critical, actively exploited vulnerabilities directly to open-source projects. This move ensures that essential security patches are not kept behind a corporate paywall, benefiting all users of the technology.
Industry leaders have praised the initiative, with NodeSource CTO Adrian Estrada noting it alleviates the burden on overworked open-source maintainers. Root's founders emphasized their focus on providing genuine support for open source rather than creating closed, proprietary systems. This philosophy aligns with their goal of fixing security problems in place without forcing disruptive changes on development teams.
The acquisition of Root by Aikido Security marks a significant consolidation in the application security market, combining a broad platform with specialized patching technology. This strategic union is poised to deliver a more seamless and effective solution for developers grappling with open-source vulnerabilities. By focusing on in-place remediation and community contribution, the company aims to redefine how organizations approach and manage software supply chain security.