Built for the CISO
The CISO's reality
Under NIS2 and DORA, senior management - including the CISO - is personally accountable for inadequate security measures or failure to report incidents; for essential entities, managers can be temporarily barred (NIS2 Art. 32). ROOTKey builds the immutable audit trail that proves you acted.
Attackers increasingly corrupt data without encrypting it - bypassing traditional defences without leaving an obvious trace. Your existing backups may already be compromised. ROOTKey detects integrity breaches in real time, before you restore corrupted data.
Having a security policy is no longer enough. Regulators and auditors now demand cryptographically verifiable, timestamped proof that controls were in place and working at the exact moment of an incident. ROOTKey generates that evidence automatically.
The numbers
Each metric below represents a risk that ROOTKey directly mitigates.
How it works · From day one to cryptographic proof
Integrate via REST API, webhooks or native connectors. IaC templates for private cloud and on-premise.
Every data operation generates a cryptographic fingerprint anchored in an immutable registry. Coverage of every data operation - each write, update and deletion is signed and timestamped.
Integrity breaches surface within seconds, with cryptographic timestamps. You know exactly which records were touched, when and why - before the IR team is even called.
Generate tamper-proof evidence packs for regulators, auditors or the board in minutes. Pre-formatted for NIS2 Art. 23, DORA Art. 17 and GDPR Art. 32.
Full traceability
Other tools tell you a file was tampered with. ROOTKey shows exactly what changed, who changed it, when and from where, and restores the last version proven valid.
ROI calculator
Put the published average cost of a breach and the fine ceiling that applies to you beside the yearly cost of ROOTKey. Every figure has a source.
How the figures are calculated
Reference figures from published sources, not a forecast of your losses or a legal assessment.
Compliance coverage
ROOTKey maps your controls directly to NIS2, DORA and GDPR - so your compliance team has evidence from day one.
Any file
PDF, images, Word, Excel, PowerPoint, tables and databases: whatever the file, ROOTKey compares it with its sealed original and shows only what was altered.
SaaS · Private cloud · On-premiseSharePoint · OneDrive · Amazon S3 · Cloudflare R2 · tables and databases · REST API and webhooks
“ROOTKey is an agile, flexible, and highly skilled company. They demonstrated the ability to quickly adapt their API to the specific needs of our project. Additionally, they have a deep understanding of how their business partners operate and deliver a service with value far exceeding its cost.”
Paul EdgeDirector of Blockchain and Metaverse, EDPCISO FAQ
No - it complements them. Your SIEM detects events; ROOTKey answers which data can still be trusted after an alert. Backup restores systems; ROOTKey verifies that the restored data is clean. They answer different questions and work best together.
Yes. ROOTKey detects integrity breaches continuously - within seconds you know exactly which records were touched and which were not. That is the evidence your IR team and your legal counsel need from the first moment of the incident.
NIS2 Art. 20 and DORA Art. 5 hold senior management personally accountable for inadequate controls. ROOTKey generates a timestamped cryptographic record proving that controls were active and working at the exact moment of any incident - the audit trail that helps show you acted correctly.
Put the IBM global average cost of a breach (US$4.99M in the 2026 report) and the NIS2 fine ceiling for your turnover (for an essential entity, €10M or 2%, whichever is higher) beside the yearly cost of ROOTKey Enterprise: €24,900 to €149,400 at list price. The ROI calculator on this page does this for your turnover, and every figure links to its source. We also provide board-ready slides: contact our team.
Backups restore systems to an earlier state. They cannot tell you whether that state is trustworthy - attackers often compromise backup chains months before triggering an incident. ROOTKey provides cryptographic proof of which data was clean before, during and after an event.
Three deliverables: (1) a cryptographic integrity report covering your scoped dataset, (2) a pre-formatted regulatory evidence pack for NIS2 Art. 21/23, DORA Art. 17 and GDPR Art. 32, and (3) a full technical wrap-up session with your security team. The cost of the POC (€5K) is credited against your subscription.
Brief complete
The question is whether you can prove you were prepared. ROOTKey gives you the evidence to show it.