Aikido Acquires Root to Combat Supply Chain Vulnerabilities

On June 30, 2026, Aikido Security announced its acquisition of Root, a startup specializing in automated vulnerability remediation for open-source software. This acquisition aims to enhance supply chain security as open-source components have become primary targets for attackers. The integration will leverage AI agents to generate patches for known vulnerabilities without requiring teams to upgrade their existing systems. Aikido's new offerings, Aikido Libraries and Aikido Images, will provide drop-in replacements that patch software without breaking changes. The urgency of this acquisition is underscored by the fact that nearly a third of known vulnerabilities are exploited on or before their disclosure date. The Log4Shell vulnerability, discovered in 2021, remains prevalent in many production systems. Aikido and Root's collaboration aims to backport critical fixes to the community, addressing the overwhelming security workload faced by open-source maintainers. This initiative is positioned as a significant step towards securing the software supply chain against increasingly sophisticated AI-driven attacks.

Key Points: • Aikido Security acquired Root to enhance supply chain security for open-source software. • AI agents will automate the generation of patches for vulnerabilities without requiring upgrades. • Nearly a third of known vulnerabilities are exploited on or before their disclosure date.