vulnerability-remediation
(4)
Root Raised $37.6 Million to Shrink Containers - Then Found the Bigger Business Was Fixing Them
The Boston startup began by trimming Docker images. Its sharper insight was that security teams did not need another list of vulnerabilities - they needed tested fixes that could arrive without an upgrade, a rebuild marathon or a ruined sprint.
SubImage
SubImage is a San Francisco security startup building an open-core security graph that maps a company's cloud and SaaS infrastructure so teams can see who can access what, and why. Built by the original team behind Cartography, the open-source graph tool created at Lyft and now a CNCF project, SubImage sells a managed, agentless platform for attack path analysis, asset inventory, and misconfiguration detection. Backed by a $4.2M seed round, it positions itself as an open-core alternative to Wiz.
Automox
Automox is a cloud-native IT automation and endpoint management company that helps organizations patch, configure, and secure Windows, macOS, and Linux devices from a single platform. Founded in 2015 in Boulder, Colorado, its agent-based, server-free approach automates patch management and vulnerability remediation across distributed fleets, and its Otto generative-AI assistant lets IT teams build automation scripts (Worklets) in plain language. The company serves more than 1,500 customers across 30-plus countries and has raised roughly $154 million, including a $110 million Series C led by Insight Partners in 2021.
NinjaOne
NinjaOne is an Austin-based software company that makes an automated, cloud-native endpoint management platform used by IT teams and managed service providers to monitor, secure, patch, back up and control laptops, servers, mobile devices and SaaS data from a single console. Founded in 2013 as NinjaRMM, it now serves more than 30,000 customers and manages over 5 million endpoints, and in 2025 raised $500 million in Series C extensions at a $5 billion valuation while remaining founder-led and debt-free.