Vercom Builds Cybersecurity Platform OWNROOT From Scratch, Launch Set for 2027

Polish tech company Vercom, listed on the Warsaw Stock Exchange, has confirmed it is working on an entirely new product: OWNROOT, a cybersecurity platform built from the ground up using artificial intelligence. Commercial launch under a SaaS model is planned for the second half of 2027, with customers in Europe as the first target market.

What Vercom announced

The company revealed its new direction alongside its second-quarter 2026 results. Vercom, until now known mainly for mass-communication tools such as Freshmail and the MailerLite platform, announced its entry into the cybersecurity market with a new, standalone product.

CEO Krzysztof Szyszka described the project as an investment in a new revenue stream. Earlier, in an interview with Bankier.pl back in June 2026, Vercom representatives had said product details would only be revealed alongside the second-quarter results, which is now what happened.

Better monetization of MailerLite should translate into strong results traction in the second half of the year, and the investment in OWNROOT is a step toward a new source of margin - Krzysztof Szyszka, CEO of Vercom

What OWNROOT is meant to do

According to information released by the company itself, the platform is meant to combine three functional areas: governance, risk and compliance (GRC), attack surface management (ASM), and penetration testing as a service (PTaaS). The goal is to make it easier for companies to satisfy several overlapping European regulations at once.

Among the regulatory frameworks it is meant to support are the EU's Cyber Resilience Act (CRA), DORA for the financial sector, the NIS2 directive, GDPR, and the AI Act, as well as industry standards such as ISO/IEC 27001, ISO 22301, and the CIS Controls. The product is meant to map overlapping requirements onto shared controls and practical implementation steps, instead of forcing companies to run a separate audit for each regulation.

Why now

Vercom's move reflects a structural skills shortage in the cybersecurity market. According to figures cited alongside the announcement, the European Union alone is short nearly 300,000 cybersecurity specialists. The company argues it had to build up this expertise internally to meet the security demands of its own clients using its communication platforms, giving it a natural starting point for building a standalone product.

This approach, a marketing-technology vendor entering the cybersecurity market, is not typical, but it reflects a broader trend of tech companies treating regulatory compliance as a growing demand segment driven by successive waves of EU rules taking effect in 2026-2027.

Financial backdrop

The OWNROOT announcement coincided with strong quarterly results for the group. In the second quarter of 2026, Vercom generated PLN 27.2 million in net profit (versus PLN 22.6 million a year earlier) and PLN 132.9 million in revenue (versus PLN 114.1 million), with adjusted EBITDA up 18 percent year over year to about PLN 39 million. The customer base grew 40 percent, to 140,400, with the pace of new customer acquisition reportedly three times higher than the group's historical average.

The company maintained its adjusted EBITDA target for 2026 at PLN 165 million and said it feels more confident about hitting its financial targets for 2027, the year OWNROOT is set to launch commercially.

What this means for the market

For Polish companies grappling with NIS2, DORA, or AI Act implementation, another domestic compliance-tools vendor could mean a wider choice of solutions built specifically around European regulations, unlike US platforms that often require local adaptation. The launch is still about a year and a half away, however, and the company has not yet disclosed pricing or the product's detailed technical architecture.

Vercom said it would share further updates on OWNROOT's development progressively as it approaches the commercial launch planned for the second half of 2027.