Aikido Security Bolsters AI Cybersecurity Platform With Root.io Acquisition

Belgian cybersecurity unicorn Aikido Security NV is strengthening its position in the fast-growing application security market with the acquisition of Root.io Inc., a U.S.-based startup specializing in patching vulnerable open-source software without requiring disruptive version upgrades. Financial terms of the deal were not disclosed.

Photo by Markus Winkler from Pexels: 

The acquisition adds an AI-powered remediation capability to Aikido's developer-first security platform at a time when enterprises are seeking more automated ways to secure their software supply chains. Rather than forcing organizations to upgrade to newer software releases—which can introduce compatibility issues, require extensive testing, and delay deployments—Root generates security patches for the exact versions of open-source libraries already running in production.

For Aikido, the transaction expands its platform beyond vulnerability detection and prioritization into automated remediation, one of the fastest-growing segments of application security. The company plans to integrate Root's technology into a new feature called Aikido Libraries, enabling developers to deploy verified patches for critical vulnerabilities while minimizing operational disruption.

The deal also reflects a broader trend across the cybersecurity industry, where vendors are acquiring specialized AI startups to build end-to-end security platforms. As enterprises consolidate their security stacks, providers that combine detection, prioritization, and remediation within a single platform are gaining a competitive edge.

The addition of Root is expected to strengthen Aikido's software supply chain security offering, particularly for organizations that rely heavily on open-source software but lack the resources or flexibility to continuously upgrade dependencies.

The acquisition aligns with Aikido's aggressive expansion strategy. Since reaching unicorn status earlier this year following a $60 million Series B funding round, the Ghent, Belgium-based company has continued to broaden its platform through targeted acquisitions. Previous deals included AI-powered code-review startup Trag and autonomous penetration-testing companies Allseek and Haicker, underscoring Aikido's ambition to build a unified application security platform for modern development teams.

Beyond integration, Aikido said it plans to contribute backported security patches to upstream open-source projects instead of keeping them exclusive to paying customers. The initiative could accelerate vulnerability remediation across the open-source ecosystem while reinforcing the company's developer-first philosophy.

As cybersecurity vendors race to embed AI throughout the software development lifecycle, the Root acquisition represents more than a product expansion. It highlights how strategic M&A has become a key growth strategy for security companies seeking to deliver AI-native platforms that protect applications from code creation through production.

Why The Deal Matters

Root has built its reputation around what it calls agentic vulnerability remediation, using AI agents to research, generate, validate, and ship security patches in minutes rather than weeks. Its key differentiator is the ability to apply backported fixes directly to the exact package versions organizations already use, allowing security teams to remediate vulnerabilities without rebuilding applications or upgrading dependencies.

What Aikido Gains In This Deal

The acquisition enhances Aikido's broader platform, which already covers code security, cloud security, runtime protection, and penetration testing. By integrating Root's capabilities into Aikido Libraries, the company moves beyond helping developers identify vulnerabilities to enabling them to fix those vulnerabilities automatically within the same platform.

Founded in 2022 and headquartered in Ghent, Aikido has rapidly emerged as one of Europe's fastest-growing cybersecurity companies. In addition to its Belgian headquarters, it operates offices in the United States, the United Kingdom, and Singapore. Earlier in 2026, the company raised a $60 million Series B round at a $1 billion valuation and has since accelerated its expansion through a series of strategic acquisitions.

Root, formerly known as Slim.AI, has raised approximately $37.6 million in fresh funding. Its AI-powered platform automates the research, development, testing, and delivery of security patches, providing a faster, less disruptive alternative to traditional patch-and-upgrade workflows. Rather than simply identifying software vulnerabilities, Root focuses on resolving them quickly while preserving application stability, positioning itself as a fix-first platform for managing open-source dependency risk.