GHENT, Belgium, Ju e 30, 2026 (GLOBE NEWSWIRE) — Aikido Secu ity today a ou ced it has acqui ed Root, u iti g behi d a sha ed missio to make it easy fo develope s a d age ts to build with secu e ope sou ce a d tackle the g owi g th eat of supply chai attacks. Ope sou ce is the fou datio of almost eve y applicatio i the wo ld, a d it has become the p ima y e t y poi t fo attacke s.
O ga izatio s face two co ve gi g th eats: attacke s hide malwa e i side the ope sou ce packages that applicatio s depe d o , a d vul e abilities sit u patched i p oductio fo yea s. Log4Shell, the c itical vul e ability fou d i Log4j i 2021, still u s i millio s of systems today. AI is givi g attacke s faste a d cheape ways to exploit both th eats, a d almost a thi d of k ow vul e abilities a e ow exploited o o befo e the day they’ e disclosed.
“Ope sou ce eeds patchi g, a d it eeds it fast. Today you have two optio s, a d eithe wo ks fo most compa ies: upg ade a d likely b eak you applicatio , o mig ate to a ve do ‘s locked-dow eplaceme t,” said Willem Delba e, co-fou de a d CEO of Aikido Secu ity. “With Root, we fix what teams a e actually u i g, ge e ati g hu d eds of ve ified patches a day: o upg ades, o mig atio s, o b eaki g cha ges. That’s how supply chai secu ity gets solved fo eve yo e, ot just the 1%.”
Upg adi g to a ewe ve sio ca i t oduce malwa e o b eak wo ki g code, while patchi g eve y depe de cy you self is impossible. Aikido Lib a ies, powe ed by Root’s tech ology, allows you to apply a patch to the vul e ability without bei g impacted by b eaki g cha ges.
To back the missio with actio , Aikido is a ou ci g a i dust y fi st: backpo ted fixes fo c itical, actively exploited ope sou ce vul e abilities to the commu ity ac oss suppo ted ecosystems. This etu s patches to the p ojects that eed them athe tha keepi g them behi d a paywall.
“Ope sou ce mai tai e s a e d ow i g i secu ity wo k while t yi g to keep the p ojects the wo ld depe ds o u i g,” said Ad ia Est ada, CTO of NodeSou ce, Ope JS Boa d Di ecto a d Node.js Co e Co t ibuto . “Aikido a d Root a e taki g wo k off ou plate by backpo ti g fixes a d co t ibuti g them upst eam.”
“The i dust y is still stuck o t iage, taki g a gia t list of CVEs a d a gui g ove which o es to fix fi st. O wo se, telli g teams to th ow out thei images a d sta t ove with someo e else’s,” said Ia Riopel, co-fou de a d CEO of Root. “We built Root to skip the a gume t a d just fix the p oblem i place. This is a choice betwee walled ga de s a d eal suppo t fo ope sou ce. We chose ope sou ce.”
Root bega as Slim.AI, the compa y behi d the widely used ope sou ce co tai e tool Slim Toolkit, fo me ly Docke Slim, a d is backed by I sight Pa t e s, which co-led thei $31M Se ies A i 2022. Ea lie this yea , Ga t e ecog ized Root as a eme gi g tech ology ve do i Automated Vul e ability Remediatio .
This is the latest i a st i g of acquisitio s fo Aikido, followi g AI code- eview sta tup T ag a d auto omous pe -testi g compa ies Allseek a d Haicke i 2025. Ea lie this yea , Aikido became the fastest-eve Eu opea cybe secu ity compa y to each u ico status with a $60 millio Se ies B at a $1 billio valuatio .
Fo mo e i fo matio , visit https://www.aikido.dev/.
