ROOTKey's pitch is a technical one: use a blockchain as a verification layer, not a currency. The Lisbon-based startup is building a platform that generates immutable cryptographic proofs for data, aiming to guarantee its integrity before and after a cyberattack. For banks, defense contractors, or any regulated entity, the value proposition is an audit trail that survives the breach itself.
Founded in 2022 by CEO Gonçalo Gil and CTO Luís Costa, the company has operated with a low public profile. Its early history includes a period of operating from a converted bathroom in a Felgueiras apartment before moving to a Lisbon co-working space [Gonçalo Gil personal site]. ROOTKey recently graduated from Portugal's first defense-focused accelerator, securing a spot as one of 30 companies selected from over 230 applicants [Portugal Startup News, Jan 2026].
The product wedge: integrity after the attack
The platform is modular, split into three core offerings. The foundational ROOTKey Platform acts as a unified verification layer. ROOTKey Developers provides SDKs and APIs for integrating verifiable data pipelines into existing infrastructure. The top tier, ROOTKey Enterprise, adds private environments, advanced monitoring, and a compliance dashboard for full audit trail visibility [Portugal Startup News, Dec 2025].
The system hashes data and writes the proofs to a blockchain, creating a timestamped, immutable record. This allows any party to later verify that a document, transaction log, or system state has not been altered since it was certified.
Traction through institutional backing
Public customer names and deal sizes are not disclosed. Beyond the defense accelerator, ROOTKey has been recognized as one of the top three cybersecurity companies in Portugal [Prospeo]. The company is reportedly targeting a 200% growth in its customer base, with plans to expand its presence into the U.S. and German markets in 2026 [Portugal Startup News, Dec 2025].
The team remains small, listed at 2-10 employees on LinkedIn [LinkedIn]. Gil's background includes studies at Instituto Superior Técnico and experience at the World Trade Center Lisboa [Gonçalo Gil LinkedIn].
The scaling hurdles
ROOTKey faces the classic scaling challenges of any infrastructure play targeting enterprises:
- Throughput and latency. Continuously writing cryptographic proofs for high-volume enterprise data streams is computationally expensive.
- Integration burden. The value is only realized if the verification layer is deeply embedded into critical data pipelines.
- Blockchain skepticism. ROOTKey must overcome a perception hurdle to be evaluated purely on its utility as a tamper-evident logging system.
The architecture is sound in theory, but the real test is operationalizing it under load.