Aikido buys Israel’s Root to patch open source with AI
The business move
Aikido Security, a Belgian cybersecurity company valued at $1 billion, has acquired Root, an Israeli startup that uses AI to patch open-source software vulnerabilities without breaking applications relying on the flawed code. Root’s AI agents can fix security flaws in open-source components while preserving the integrity of dependent apps, a capability few existing security tools offer.
Why it matters
Open-source software powers a large portion of modern applications, but patching vulnerabilities in that code often leads to unexpected breaks or requires extensive manual work to maintain compatibility. Root’s AI-driven approach reduces the risk of disruption when fixing open-source flaws, making it easier and faster for businesses to keep their software secure without sacrificing stability. Aikido’s acquisition signals growing pressure on cybersecurity vendors to move beyond detection and mitigation toward automated, risk-aware remediation at scale.
Who gains and who gets squeezed
Application operators and security teams that depend heavily on open-source will gain better protection without the usual trade-offs of downtime or complex fixes. This could reduce operational burden and security debt significantly. Meanwhile, traditional patch management and security testing providers may face pressure to improve automation or lose ground to AI-powered alternatives that handle vulnerability fixes more smoothly. Aikido itself strengthens its position as a European cybersecurity leader by offering a more comprehensive security lifecycle toolset.
What to watch next
The integration of Root’s AI patching technology into Aikido’s platform will reveal how well it performs at enterprise scale and whether it can cover a broad range of open-source libraries and languages. Competitors will likely respond with their own AI remediation capabilities or acquisitions. Observing adoption timelines and how much time and cost savings operators realize will clarify if this approach redefines open-source patching standards in cybersecurity.
AI Quick Briefs Editorial Desk
