Aikido Security acquires Root.io to enhance open-source software patching

Belgian cybersecurity firm Aikido Security NV has acquired Root.io Inc., a company specializing in patching vulnerable open-source software at specific versions organizations are already using, according to a recent report by Silicon Angle.

Root.io offers agentic vulnerability remediation, utilizing AI agents to research, write, test, and deploy patches for newly published vulnerabilities within minutes. This technology allows for direct application to existing container images and software dependencies without requiring rebuilds or migrations. In most cases, Root makes no code changes, relying on human review for patch approval.

Aikido plans to integrate Root's technology into its platform as Aikido Libraries, aiming to fix specific flaws without introducing breaking changes associated with full version upgrades. The acquisition also includes a commitment from Aikido to back-port fixes for critical, actively exploited open-source vulnerabilities to the wider community.

Source: Silicon Angle