Mondoo
Mondoo provides an Agentic Managed Vulnerability Service that pairs an AI-native security platform with expert operators to continuously find, prioritize, and remediate vulnerabilities across enterprise cloud, on-premises, endpoint, and SaaS environments for 300+ customers.
- Company typePrivate
- Founded2020
- HeadquartersSan Francisco, United States
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Mondoo does
Mondoo is a venture-backed cybersecurity company founded in 2020 that provides an Agentic Managed Vulnerability Service for enterprise organizations. The platform continuously discovers, prioritizes, and remediates vulnerabilities and misconfigurations across cloud, on-premises, endpoints, SaaS, network devices, and the SDLC, replacing traditional scan-and-report workflows with outcome-driven delivery. Mondoo claims a 60% reduction in open vulnerabilities within the first 90 days and a mean-time to remediation under 16 days for managed service customers, serving 300+ organizations including Fortune 50 companies across telecommunications, financial services, manufacturing, healthcare, and IT services.
The product stack is built on an open source foundation (cnquery for infrastructure querying and cnspec for policy scanning, co-created by the founders of Chef InSpec), augmented by a proprietary Mondoo Query Language (MQL), a patented AI model for vulnerability prioritization, and AI agents that automate the full remediation loop with human oversight. The platform ingests from and dispatches to 70+ integrations spanning AWS, Azure, Google Cloud, CrowdStrike, SentinelOne, Microsoft Defender, Tenable, Rapid7, Qualys, Jira, GitHub, and others, and exposes its data to external AI applications through a Model Context Protocol (MCP) Server. Adjacent offerings include the AI Skills Check for AI agent supply-chain security, a VS Code extension, and the xgrep code scanner.
Mondoo operates dual legal entities in Berkeley, California (Mondoo, Inc., Delaware) and Berlin, Germany (Mondoo GmbH), with a distributed team of 11–50 across more than 15 countries. Revenue is generated through per-asset subscription pricing for both the Managed Vulnerability Service and the commercial platform, sold via direct enterprise field sales, inside sales, and an emerging MSSP partner channel. The company has raised $32.5M in total funding, most recently a $17.5M round led by HV Capital in September 2025, and is led by co-founders Soo Choi-Andrews (CEO), Christoph Hartmann (CTO), Dominik Richter (CPO), and Patrick Münch (CISO).
Mondoo firmographics
Firmographics- Name
- Mondoo
- Legal name
- Mondoo, Inc.
- Website
- https://mondoo.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Mondoo provides an Agentic Managed Vulnerability Service that pairs an AI-native security platform with expert operators to continuously find, prioritize, and remediate vulnerabilities across enterprise cloud, on-premises, endpoint, and SaaS environments for 300+ customers.
- Ownership category
- akta.pro rank
Mondoo industry classification
Industry- Product category
- Vulnerability Management
- NAICS
- Software Publishers (5132), Security Systems Services (except Locksmiths) (561621)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Data Security & Privacy Managed Services (DLP/Encryption) (BPAEADAL)
- akta.pro secondary industry
- Endpoint Security Managed Services (EDR/XDR) (BPAEADAH)
Keywords
Where Mondoo is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
Mondoo business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Operations, Marketing or Sales
Revenue model
- Managed Vulnerability Service: Subscription-based managed service charged by number of assets. Combines AI platform with world-class security experts who work as extension of customer team to find, prioritize, and fix vulnerabilities.
- Platform Subscription: Commercial platform subscription building on open source cnquery and cnspec tools. Simple per-asset pricing model.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Managed Vulnerability Service with per-asset pricing |
Go-to-market motion2 records
Distribution channels4 records
Marketing channels9 records
Mondoo product offering
Product offeringCore offering
Mondoo delivers an Agentic Managed Vulnerability Service that combines an AI-native security platform with embedded security experts to continuously find, prioritize, and remediate vulnerabilities and misconfigurations across cloud, on-premises, endpoints, SaaS, and SDLC environments. The commercial offering is sold as a per-asset annual subscription, layered on top of its open-source cnquery and cnspec foundations, and complemented by a free AI Skills Check scanner for AI agent security.
Product overview
Mondoo offers an Agentic Managed Vulnerability Service that combines an AI-native security platform with expert security professionals to deliver end-to-end vulnerability management. The core platform integrates open source tools (cnquery for infrastructure querying and cnspec for policy scanning), a proprietary query language (MQL), and AI-powered prioritization and remediation capabilities. Mondoo's product portfolio includes the main commercial platform for unified vulnerability management, free tools like AI Skills Check for AI agent security assessment, and the MCP Server enabling AI application integration. The company also maintains developer tools including xgrep code scanner and a VS Code extension. The service differentiates from traditional vulnerability scanners by focusing on actual remediation outcomes rather than just detection, using autonomous AI agents to drive fixes to completion.
Differentiator
Problem solved
Functional benefit
Products and services
- Mondoo Agentic Managed Vulnerability Service Outcomes-based managed vulnerability management service for enterprise customers that pairs an AI-native platform with embedded security experts to continuously find, prioritize, and remediate vulnerabilities and misconfigurations across cloud, on-premises, endpoints, SaaS, and SDLC environments.
- Mondoo Platform Unified commercial security platform providing vulnerability management, compliance automation, and asset intelligence across hybrid infrastructure from a single console, with risk-based prioritization, guided remediation, and integration with existing security and IT service management tools.
- cnquery Open-source infrastructure querying tool that lets users query any asset to gather security and configuration data, used by thousands of organizations worldwide as the data-collection foundation of the Mondoo Platform.
- cnspec Open-source security and policy scanning CLI that scans systems, clouds, SaaS services, and APIs against security policies from the terminal.
- Mondoo AI Skills Check Free security scanner that identifies security risks in AI agent skills before installation, using Pattern Match, ML Classifier, Semantic Analysis, and Deep Inspection to detect malicious signatures, novel threats, misleading claims, and behavioral risks across AI agents and registries.
- xgrep Fast, Semgrep-compatible code scanner with code intelligence built for AI agents, used to scan code for real, exploitable vulnerabilities.
- Mondoo MCP Server Model Context Protocol server that gives AI applications real-time access to Mondoo's exposure assessment data, enabling AI models to query vulnerabilities and security findings for faster remediation.
- Mondoo Security Extension for VS Code Visual Studio Code extension that lets developers catch code and infrastructure security issues without leaving their editor.
Quantifiable outcome
- 60% reduction in open vulnerabilities within first 90 days
- +4 more outcomes
Companies that use Mondoo
Customer profileNamed customers11 records
Segments5 records
Ideal customer profiles3 records
Mondoo technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration15 records
AI capability7 records
Feature6 records
Mondoo partnerships and signals
Strategic signalPartnerships
15 partnerships are on record, tiered core and major.
- Google CloudcoreFeatured at Google Cloud Next 2026 conference; MCP server integration with Google AI applications; unified policy as code solution unveiled at Google Cloud Next 2025
- AWScoreCore cloud integration partner; AWS serverless integration; support for AWS security tools and infrastructure
- AzurecoreCore cloud integration partner; five-minute Azure setup feature; Azure DevOps workflow integration
- Google Cloud PlatformcoreCore cloud integration partner with comprehensive security coverage
- CrowdStrikemajorSecurity tool integration for unified findings - allows ingestion of CrowdStrike findings into Mondoo platform
- SentinelOnemajorSecurity tool integration for unified findings - allows ingestion of SentinelOne findings into Mondoo platform
- Microsoft DefendermajorSecurity tool integration for unified findings - allows ingestion of Microsoft Defender findings into Mondoo platform
- TenablemajorSecurity scanner integration for vulnerability data ingestion
- Rapid7majorSecurity scanner integration for vulnerability data ingestion
- QualysmajorSecurity scanner integration for vulnerability data ingestion
- JiramajorTicketing integration for creating and tracking remediation tickets directly from Mondoo
- GitHubcoreCIS SecureSuite Certified for GitHub; GitHub Actions security scanning; ticketing integration
- GitLabmajorTicketing integration for creating and tracking remediation tickets from Mondoo
- ZendeskmajorTicketing integration for creating and tracking remediation tickets from Mondoo
- Azure DevOpsmajorWorkflow integration for development and operations teams
Scale indicators9 records
Recent moves6 records
Expansion highlights6 records
Mondoo competitors and assessment
Company assessmentDirect peers
- Tenable: Tenable is a leading vulnerability management platform offering Nessus and Tenable One for exposure management across cloud, on-prem, and OT. It directly competes with Mondoo in enterprise vulnerability prioritization and remediation workflows.
- Qualys: Qualys provides a cloud-based vulnerability management and compliance platform (Qualys VMDR, TruRisk) used by large enterprises. It is a direct competitor to Mondoo in vulnerability scanning, prioritization, and managed risk reduction.
- Rapid7: Rapid7 offers InsightVM for vulnerability management and Metron for security orchestration, targeting enterprise security teams. It competes with Mondoo on vulnerability prioritization and remediation automation.
- Wiz: Wiz is a cloud security platform (CNAPP) that includes vulnerability and exposure management for cloud workloads. It competes with Mondoo's cloud and SaaS coverage and is increasingly expanding into agent-based hybrid coverage.
- Orca Security: Orca Security provides agentless cloud security with vulnerability management, posture management, and AI-driven prioritization. It competes with Mondoo's cloud and SaaS vulnerability and exposure management capabilities.
- Vicarius: Vicarius offers a vulnerability remediation platform (vRx) with prioritization and automated patching for endpoints and servers. It is a closer direct competitor to Mondoo's agentic, remediation-outcome positioning.
- Balbix: Balbix provides an AI-driven security posture and vulnerability risk management platform with risk-based prioritization. It is comparable to Mondoo in combining AI-based risk scoring with enterprise vulnerability workflows.
Broad incumbents
- CrowdStrike: CrowdStrike's Falcon platform combines endpoint protection with Falcon Spotlight vulnerability management and broader exposure modules. Mondoo ingests CrowdStrike findings, but CrowdStrike competes at the platform layer with broader security operations scope.
- Palo Alto Networks: Palo Alto Networks' Cortex platform includes vulnerability management and exposure assessment via Cortex Xpanse and Prisma Cloud. It competes broadly with Mondoo as part of a much larger cybersecurity portfolio targeting enterprise security buyers.
Emerging players
- Snyk: Snyk focuses on developer-first security including code, open source, and IaC scanning. It overlaps with Mondoo in SDLC and dependency vulnerability scanning, particularly via its container and IaC products, but is more developer-platform centric.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat6 records
Key risks5 records
Key highlights7 records
Customer concentration
Mondoo social profiles
Digital presenceMondoo compliance and trust
Trust signalCompliance4 records
Mondoo financial estimates
Financial estimateRevenue estimate
Valuation estimate
Mondoo leadership team
Management profileNumber of profiles
Profiles5 records
Mondoo funding detail
Funding detailFunding overview
Funding rounds3 records
Investors5 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Mondoo M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Mondoo
What does Mondoo do?
Mondoo delivers an Agentic Managed Vulnerability Service that combines an AI-native security platform with embedded security experts to continuously find, prioritize, and remediate vulnerabilities and misconfigurations across cloud, on-premises, endpoints, SaaS, and SDLC environments. The commercial offering is sold as a per-asset annual subscription, layered on top of its open-source cnquery and cnspec foundations, and complemented by a free AI Skills Check scanner for AI agent security.
Is Mondoo a public or private company?
Mondoo is a private company. It is classified as venture growth investor backed and is currently operating.
When was Mondoo founded?
Mondoo was founded in 2020. It employs 11 to 50 people.
Where is Mondoo based?
Mondoo is headquartered in San Francisco, United States, in the North America region.
How does Mondoo make money?
Two revenue lines are on record. Managed Vulnerability Service is the primary driver. The others are platform Subscription.
Who are Mondoo's main competitors?
Direct peers on record are Tenable, Qualys, Rapid7, Wiz, Orca Security, Vicarius and Balbix. Broad incumbents are CrowdStrike and Palo Alto Networks. Snyk is listed as an emerging player.
Does Mondoo have an API?
Yes. Mondoo provides the Mondoo Query Language (MQL) for querying infrastructure assets and writing security checks, along with an MCP (Model Context Protocol) Server that provides AI models with real-time access to Mondoo's exposure assessment data. The MCP server enables AI applications to integrate with Mondoo for vulnerability management and security findings. The platform also offers a REST API for ticketing integrations with Jira, Zendesk, GitHub Issues, GitLab, and Azure DevOps. Developer documentation is at mondoo.com/docs.
What industry is Mondoo in?
Mondoo's product category is Vulnerability Management. Its primary akta.pro industry code is BPAEADAL, Data Security & Privacy Managed Services (DLP/Encryption), with a secondary code of BPAEADAH, Endpoint Security Managed Services (EDR/XDR). Its NAICS code is 5132 and its SIC code is 7372.