Poland's Vercom enters AI cybersecurity: OWNROOT to launch in Europe in 2027

Polish tech company Vercom, known primarily for cloud services for email, SMS and business communications, is entering a new market. The company has started developing OWNROOT — a cybersecurity platform in which artificial intelligence is to be the foundation of the entire system, not just an additional feature.

Commercial launch of the product as a SaaS model is scheduled for the second half of 2027. The first customers are expected to be companies in Europe, where businesses are simultaneously facing growing cyber threats and new requirements for protecting information systems.

What OWNROOT will do

According to Vercom's COO Tomasz Pakulski, the new system will combine three areas of business protection.

• regulatory module — control of compliance with cybersecurity requirements and collection of evidence of compliance;
• external attack surface monitoring — searching for vulnerable infrastructure elements accessible from the network;
• pentesting — testing systems for vulnerabilities by simulating the actions of a potential attacker.

Instead of separate one-off checks, OWNROOT is designed to work as a continuous process. AI will coordinate monitoring, analyze the infrastructure and look for weak points, while humans will remain involved in making mission-critical decisions.

Vercom emphasizes that development is already at a fairly advanced stage.

AI is to be the core of the product

For Vercom, the key differentiating factor of OWNROOT lies precisely in its architecture.

The company does not want to add a few AI features to traditional security software. The platform is designed from the start as AI-first — with artificial intelligence at the center of analysis and control processes.

This reflects a broader market trend. AI simultaneously helps specialists detect threats faster and gives new tools to the attackers themselves: it automates the search for vulnerabilities, the creation of malicious code and the scaling of attacks.

In August, Gartner predicted that the global market for AI system protection solutions alone will grow to nearly $4.8 billion in 2027, or about 69% year over year.

Why Vercom is starting with Europe

The company connects the choice of its first market not only with the number of cyberattacks, but also with regulatory changes.

One of the main factors Vercom cites is the European NIS2 directive, which expanded cybersecurity requirements for companies and organizations in critical and other regulated sectors.

For businesses, this means additional responsibilities: assess risks, protect networks, monitor contractors, document security measures and report serious incidents.

This is where Vercom sees a commercial niche for systems that not only detect technical problems, but also continuously collect evidence that a company complies with established requirements.

Cybersecurity is transforming from a one-off audit into a continuous service

Pakulski notes that demand is growing especially fast for a new generation of services that work continuously.

In the past, a company could order an audit or penetration test once a year, receive a report, fix the found issues and come back to the topic after a few months.

But that model fits modern infrastructure less well. Cloud services are updated constantly, employees connect new applications, access rights change, new servers and integrations appear.

A vulnerability can emerge just a few days after a successfully completed audit.

Therefore, the market is gradually moving towards a model of continuous monitoring: infrastructure is scanned regularly, risks are recorded automatically, and compliance is verified not once before an audit, but continuously.

How much OWNROOT will cost

The company has not yet announced a fixed uniform tariff.

OWNROOT will be sold on a subscription basis. The price is expected to depend on two factors:

• the complexity and scale of the client's infrastructure;
• the amount of AI resources used, which the company describes through token consumption.

Thus, the business model will be similar to modern cloud services: the client pays not for a perpetual license, but for the continuous use of the platform.

Vercom has created a separate company for the new business

The project has already been structured as more than just an internal experiment.

On August 4, Vercom established a separate company in Poznań, OwnRoot Sp. z o.o., to develop cybersecurity and regulatory compliance services.

Vercom controls 75% of the capital of the new structure. The remaining 25% belongs to a partner who contributed software rights and technological know-how to the company.

Vercom itself invested PLN 4 million in the project and acquired the right to appoint a majority of the members of OwnRoot's management board.

Why Vercom can afford to enter a new market

The new investment comes amid growth in the company's core business.

In the second quarter of 2026, Vercom's revenue rose to PLN 132.9 million, up from PLN 114.1 million a year earlier.

Adjusted EBITDA increased by 18% to nearly PLN 39 million, and the group's net profit reached PLN 27.2 million.

The customer base is growing particularly fast. By the end of the first half of the year, Vercom served around 140.4 thousand customers — 40% more than a year earlier.

The company's core business remains related to cloud communications. Its platforms help companies send email, SMS, push notifications and messages via messaging apps.

OWNROOT effectively adds a second technology vertical — protecting the digital infrastructure of these and other corporate clients.

Why businesses are spending more on cyber defense

For companies, cybersecurity is gradually ceasing to be exclusively the task of the IT department.

A data leak or a successful attack can simultaneously halt enterprise operations, create recovery costs, lead to regulatory demands and damage the company's reputation.

In Europe, legislative pressure adds to this. The European Union is expanding the application of NIS2, the Cyber Resilience Act and other rules, and on September 1 opened a new cybersecurity financing program worth €96 million, including a separate stream for AI-based protective tools.

For developers like Vercom, this turns security into a market with two simultaneous drivers: companies are forced to defend against more sophisticated attacks and, in parallel, prove to regulators that such defense actually exists.

But the finished product is still more than a year away

Despite the announced plans, OWNROOT cannot yet be considered a ready commercial service.

The launch is scheduled only for the second half of 2027, and Vercom still has to complete development, test the platform and prove that the new product can compete with numerous international cybersecurity companies.

Therefore, what matters more right now is the strategic shift itself: a Polish company that grew out of cloud communications is trying to use AI and European regulation to enter one of the fastest-growing segments of corporate IT.