Aikido Security is pushing beyond software security into the human layer.
The Belgian cybersecurity unicorn has acquired Warsaw-based Cyberly, a young specialist in AI-driven employee-risk management, to help build out Noon, Aikido’s employee-security product suite. Financial terms were not disclosed.
Why this deal, why now
The acquisition lands as cybersecurity M&A re-accelerates. Global cybersecurity dealmaking rebounded strongly in 2025, reaching €86 billion across 400 transactions, with total value up 273.9% year over year. In Europe, activity remained busy with 121 acquisitions in 2025, even if that was down about 9% from 2024. Importantly, 83% of those European deals were consolidation transactions, underlining platform-build and tuck-in logic across the region.
Against that backdrop, Aikido is using M&A to broaden its product scope. Available reporting links this transaction directly to Aikido’s aim to create Noon as an integrated employee-security platform that spans:
- Employee training
- Attack simulations
- Email protection
- Device protection
The strategic message is clear: buyers are increasingly treating employee exposure as a first-class attack surface, not a compliance afterthought.
What Cyberly adds
Cyberly was founded in Warsaw in 2024 and focused on AI-driven employee-risk management. Prior to the acquisition, it reportedly protected more than 300,000 people across over 200 organizations.
In Noon, Cyberly contributes capabilities including AI-driven attack simulations and visibility into AI usage. Those features map to the problem Aikido is targeting: AI-powered social engineering, including cloned voices, convincing phishing emails, fake login pages and impersonation of trusted individuals.
While many market reports point to generative AI lowering the barrier for attackers and enabling more scalable attacks, the available sources do not establish that AI-threat convergence specifically drove the acceleration in European cybersecurity M&A. What is supported here is narrower but still material: Aikido is explicitly building product around AI-enabled social engineering vectors.
Integration and execution: key questions
This is a cross-border integration into a new product line, with a very young target. That can work well in software, but execution matters.
Key questions for customers and competitors to watch:
- Product integration depth: Will Noon become a single, coherent workflow across training, simulation and protection, or a looser bundle? The user experience and admin overhead will determine adoption.
- Go-to-market clarity: How will Aikido position Noon relative to its core application security offerings? Overlap can create confusion in sales motions and messaging if not managed.
- Data and measurement: Employee-risk tooling lives and dies by measurable outcomes. What risk-scoring, reporting and incident-reduction metrics will Noon standardize on?
- Leadership bandwidth: Fast integration cycles are essential, particularly when the target is early-stage and product roadmaps are still evolving.
Aikido said it plans to retain and expand the team, and to make Poland one of Noon’s development hubs. The deal also illustrates how European cybersecurity platforms are tapping Polish and broader CEE engineering talent during product expansion, though the available sources do not provide evidence that cost arbitrage was a primary rationale.
Poland as an employee-security buildout base
The choice of Warsaw is also consistent with a market that is growing quickly. Poland’s cybersecurity market reached approximately €794.5 million in 2025 and is forecast to grow at a 7.4% CAGR from 2025 to 2030, the strongest projected CAGR among the European markets discussed in the cited research. Trade and market reports also indicate rapid spending growth in 2025, though the exact rate varies by source.
What to watch next
- Noon product roadmap: timelines for consolidating training, simulation, email and device protection into a unified platform.
- Commercial packaging: whether Aikido sells Noon as an add-on, a standalone SKU, or a bundled tier with its existing security tools.
- Customer proof points: reference wins and measurable reductions in phishing or credential-theft incidents.
- Hiring and hub buildout in Poland: pace of team expansion and which functions move to Warsaw (engineering only, or also product and support).
- Further consolidation: whether Aikido continues buying point-solutions to deepen the employee-security stack.