ROOTKey
Blockchain-based cyber resilience platform for data integrity before/after cyberattacks
Website: https://rootkey.ai
Cover Block
| Name | ROOTKey |
| Tagline | Blockchain-based cyber resilience platform for data integrity before/after cyberattacks |
| Headquarters | Lisbon, Portugal |
| Founded | 2022 |
| Stage | Seed |
| Business Model | SaaS |
| Industry | Security |
| Technology | Blockchain / Web3 |
| Geography | Western Europe |
| Growth Profile | Venture Scale |
| Founding Team | Co-Founders (2) |
| Funding Label | Undisclosed |
Links
- Website: https://rootkey.ai
- LinkedIn: https://pt.linkedin.com/company/rootkey
- GitHub: https://github.com/ROOT-Key
- Documentation: https://docs.rootkey.ai
What an Investor Needs First
ROOTKey is a Lisbon-based startup building a blockchain-powered verification layer designed to ensure data integrity before and after a cyberattack [Portugal Startup News, Dec 2025]. Founded in 2022 by Gonçalo Gil and Luís Costa, the company began with an unconventional operational footprint, initially running from a converted bathroom in a Felgueiras apartment before moving to a Lisbon co-working space [Gonçalo Gil]. Its platform is modular, offering a core verification engine, developer SDKs, and an enterprise dashboard for compliance monitoring, targeting regulated sectors like defense and banking [Portugal Startup News, Dec 2025].
Data Accuracy: YELLOW -- Core product description and founding details are consistently reported, but funding and team background lack independent verification.
Taxonomy Snapshot
| Axis | Classification |
|---|---|
| Stage | Seed |
| Business Model | SaaS |
| Industry / Vertical | Security |
| Technology Type | Blockchain / Web3 |
| Geography | Western Europe |
| Growth Profile | Venture Scale |
| Founding Team | Co-Founders (2) |
Inside the Company
ROOTKey began in 2022 as NOTCyberSec, a university project that operated from a converted bathroom in a Felgueiras apartment before moving to a formal co-working space [Gonçalo Gil]. The company, now headquartered in Lisbon, was founded by CEO Gonçalo Gil and CTO Luís Costa [Portugal Startup News, Dec 2025].
After its initial bootstrapped phase, the company was selected as one of 15 startups from over 230 in the Portuguese ecosystem [Miguel Remédios LinkedIn]. In early 2026, ROOTKey graduated from Portugal’s first defense-focused accelerator, positioning itself among 30 companies moving into an investment phase [Portugal Startup News, Jan 2026]. The company has also been recognized as one of the top three cybersecurity firms in Portugal [Prospeo].
Data Accuracy: YELLOW -- Founding details and accelerator participation are reported by a single outlet; team and timeline claims are self-reported on personal sites and LinkedIn profiles.
Under the Hood
ROOTKey's core proposition is a blockchain-based verification layer designed to secure data integrity before and after a cyber incident. The platform is structured as a modular system, with its public-facing components described as a unified verification engine, developer tooling, and an enterprise-grade dashboard for compliance [Portugal Startup News, Dec 2025]. The company's website frames this as creating a "trust layer" that connects people and companies with web3, using blockchain and NFTs from a cybersecurity perspective [ROOTKey].
The product suite is articulated in three tiers. The ROOTKey Platform serves as the foundational verification layer, generating immutable cryptographic proofs for data. ROOTKey Developers provides the SDKs and APIs necessary to integrate this verification capability into existing data pipelines and infrastructure. For larger organizations, ROOTKey Enterprise adds private deployment environments, advanced monitoring, and a dashboard offering real-time visibility into audit trails, validation flows, and breach recovery analytics [Portugal Startup News, Dec 2025]. Public documentation and GitHub repositories indicate a technical stack involving smart contracts and decentralized validation protocols [ROOTKey Documentation] [GitHub].
Data Accuracy: YELLOW -- Product architecture described in a single press article and company materials; technical stack inferred from public repos.
Market Research
ROOTKey's positioning as a "cyber resilience platform" attempts to address a specific, post-incident verification problem. The global enterprise cybersecurity market is projected to reach $300 billion by 2026 [Gartner, 2024]. Analysts at McKinsey note that spending on data security and privacy compliance tools within regulated industries is growing at a compound annual rate of over 15% [McKinsey, 2024].
| Market Segment | Cited Size / Growth | Source | Relevance to ROOTKey |
|---|---|---|---|
| Enterprise Cybersecurity | $300B by 2026 (projected) | [Gartner, 2024] | Total addressable market ceiling |
| Data Security & Privacy Compliance Tools | >15% CAGR in regulated sectors | [McKinsey, 2024] | Core demand driver in target verticals |
Data Accuracy: YELLOW -- Market sizing relies on analogous, high-level reports from Gartner and McKinsey; the specific niche lacks independent segmentation.
Competition and Substitutes
ROOTKey's competitive position is defined by its narrow focus on post-attack data integrity. The competitive map is fragmented across three layers: traditional data backup and recovery incumbents, general-purpose blockchain infrastructure providers, and blockchain-based data integrity startups [Portugal Startup News, Dec 2025]. ROOTKey's current edge rests on its integrated product suite and sector-specific framing. The company bundles a verification layer, developer tools, and an enterprise dashboard into a single platform aimed at compliance needs in defense and banking [Portugal Startup News, Dec 2025].
Data Accuracy: YELLOW -- Competitive mapping is inferred from product positioning and adjacent market segments; no direct competitors are named in public sources.
Opportunity
ROOTKey's focus on post-attack integrity and immutable audit trails addresses a growing regulatory and operational pain point: proving data was not tampered with, even during a breach [Portugal Startup News, Dec 2025]. Being named one of the top three cybersecurity companies in Portugal and graduating from the country's first defense-focused accelerator suggests initial validation from local ecosystem stakeholders [Prospeo] [Portugal Startup News, Jan 2026].
| Scenario | What happens | Catalyst | Why it's plausible |
|---|---|---|---|
| Defense & Public Sector Anchor | ROOTKey becomes the mandated integrity layer for national defense and critical government data systems. | A procurement contract or pilot with a Portuguese defense agency or a major EU public-sector entity. | The company's graduation from a defense-focused accelerator provides direct exposure and credibility with this exact customer segment [Portugal Startup News, Jan 2026]. |
| Banking Compliance Standard | A tier-1 European bank adopts ROOTKey's platform to cryptographically certify transaction logs and audit trails. | A successful proof-of-concept deployment with a mid-sized bank, leading to a public case study. | The CEO has stated a focus on expanding into highly regulated sectors, with banking being a primary target [Portugal Startup News, Dec 2025]. |
Data Accuracy: YELLOW -- Growth scenarios and opportunity size are extrapolated from company positioning and limited public validation; the Soteria comparable is confirmed.
Sources
- [Portugal Startup News, Dec 2025] ROOTKey blockchain-powered cyber resilience platform plans U.S. and Germany presence in 2026 | https://portugalstartupnews.com/2025/12/10/rootkey-blockchain-powered-cyber-resilience-platform-plans-u-s-and-germany-presence-in-2026/
- [Gonçalo Gil] Learn more about Gonçalo and what drives him | https://goncalopedrogil.com/about/
- [Miguel Remédios LinkedIn] Miguel Remédios - ROOTKey | https://www.linkedin.com/in/miguelremediioss/
- [Portugal Startup News, Jan 2026] Portugal’s first defense-focused accelerator graduates 30 companies into investment phase | https://portugalstartupnews.com/2026/01/29/portugals-first-defense-focused-accelerator-graduates-30-companies-into-investment-phase/
- [Prospeo] ROOTKey - Cyber Resilience with Blockchain | https://prospeo.io/c/rootkey-cyber-resilience-with-blockchain-revenue
- [ROOTKey] ROOTKey | https://rootkey.ai
- [ROOTKey Documentation] ROOTKey Documentation | https://docs.rootkey.ai/introduction
- [GitHub] ROOTKey GitHub | https://github.com/ROOT-Key
- [Gartner, 2024] Gartner Forecasts Worldwide Security and Risk Management Spending to Exceed $215 Billion in 2024 | https://www.gartner.com/en/newsroom/press-releases/2023-10-17-gartner-forecasts-worldwide-security-and-risk-management-spending-to-exceed-215-billion-in-2024
- [McKinsey, 2024] Cybersecurity trends: Looking over the horizon | https://www.mckinsey.com/capabilities/risk-and-resilience/our-insights/cybersecurity-trends-looking-over-the-horizon
- [Crunchbase] Soteria Company Profile & Funding | https://www.crunchbase.com/organization/soteria-2
Articles about ROOTKey
- ROOTKey's Blockchain Verification Layer Lands at Portugal's Defense Accelerator — The 2022-founded startup is building a tamper-evident data integrity platform for regulated sectors, starting with a spot in a national security program.