Root Evidence

What Root Evidence does

Root Evidence, Inc. is a privately held cybersecurity startup founded in July 2025 and headquartered in Boise, Idaho. The company operates from a registered Idaho corporation and emerged from its founders' prior work with cyber insurance carriers to identify vulnerabilities that historically resulted in multi-million-dollar payouts. It is led by a four-person founder team with prior exits at WhiteHat Security and Bit Discovery (Jeremiah Grossman, Robert Hansen, and Lex Arquette, with Heather Konold in operations).

The company's core product, Evidence Scan, is a cyber risk discovery platform built on real insurance loss data. It continuously identifies Internet-facing assets and prioritizes vulnerabilities through the lens of financial loss rather than theoretical CVSS severity, surfacing only FIREs (Financial Risk Exposures) — the sub-1% of CVEs that have historically resulted in breach and insurance payout. The platform is augmented by Lib-Theseus (an open-source tool for identifying and replacing third-party libraries to eliminate supply chain vulnerabilities), the Mythos-era Warranty ($5,000,000 financial warranty underwritten by cyber insurance partners covering breaches from unreported remotely exploited CVEs), and quarterly research reports such as the Q1 2026 KEV Report.

Root Evidence generates revenue through subscription-based enterprise licensing of Evidence Scan on a quote-based pricing model, with a free Enterprise Preview program currently gating market entry and a transition path into paid licensing. Go-to-market combines direct enterprise field sales targeting CISOs and security leaders, a formal Reseller Partner Program with deal registration protection and partner pricing, and an emerging MSSP motion. Primary customer segments are large enterprise organizations seeking defensible vulnerability prioritization for boards and regulators, and cyber insurance carriers using the platform for portfolio risk assessment and underwriting. The company closed a $12.5M seed round in July 2025 led by Ballistic Ventures with participation from Grossman Ventures.

Name

Root Evidence

Legal name

Root Evidence, Inc.

Website

https://rootevidence.com

Company type

Private

Founded year

2025

Operating status

Operating

Headcount range

1–10 employees

Short description

Root Evidence is a cybersecurity startup that uses cyber insurance loss data to identify the less than 1% of vulnerabilities that historically cause financial loss, serving enterprise security teams and cyber insurance carriers via its Evidence Scan platform.

Ownership category

akta.pro rank

Product category

Vulnerability Management Software

NAICS

Investigation and Security Services (5616)

SIC

Services-Testing Laboratories (8734)

akta.pro primary industry

Vulnerability Assessment & Scanning (HDADAHAA)

Keywords

• Vulnerability management platform
• Cyber risk prioritization
• External attack surface scanning
• Cyber insurance intelligence
• Financial risk exposures

Headquarters

HQ city

Boise

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Marketing or Sales, Operations

Revenue model

1. Evidence Scan Enterprise Licensing: Root Evidence generates revenue through enterprise software licensing of the Evidence Scan platform. The company offers a free Enterprise Preview program with transition to paid enterprise licensing. Pricing is quote-based for enterprise deployments.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels5 records

Core offering

Evidence Scan is a cyber risk discovery platform built on real insurance loss data that identifies FIREs (Financial Risk Exposures) — the small fraction of publicly exploitable vulnerabilities historically tied to breach and insurance payout. It continuously scans external attack surfaces and prioritizes remediation based on actuarial data from cyber insurance claims, enabling enterprise security teams to focus on vulnerabilities proven to cause financial loss. The platform is paired with a $5,000,000 Mythos-era Warranty that provides financial accountability for unreported remotely exploitable CVEs.

Product overview

Root Evidence offers a unified evidence-based vulnerability management platform centered on Evidence Scan, which identifies Financial Risk Exposures (FIREs) using cyber insurance loss data. The product portfolio includes Evidence Scan (core scanning platform), Lib-Theseus (open-source library replacement tool), the Mythos-era Warranty (financial accountability add-on), KEV research reports, and a reseller partner program. The platform emphasizes prioritization of the less than 1% of CVEs actuarially proven to cause financial loss rather than traditional CVSS-based scoring.

Differentiator

Problem solved

Functional benefit

Brands

• Evidence Scan: Evidence Scan is a cyber risk discovery platform built on real insurance loss data. Used by cyber insurers to identify the exposures most likely to lead to financial loss, it helps organizations focus on the vulnerabilities that actually matter.

Products and services

• Evidence Scan A cyber risk discovery platform built on real insurance loss data that identifies FIREs (Financial Risk Exposures) — the small fraction of publicly exploitable vulnerabilities historically tied to breach and insurance payout. It continuously scans external attack surfaces and prioritizes remediation on risks proven to cause financial loss, enabling enterprise security teams to reach a defensible clean state.
• Mythos-era Warranty A financial warranty product covering up to $5,000,000 in financial loss if a customer suffers a breach from any remotely exploited CVE that Root Evidence did not report. The warranty is underwritten by cyber insurance industry partners and creates vendor accountability for the vulnerability prioritization recommendations Root Evidence issues.

Quantifiable outcome

• Less than 1% of CVEs drive material financial loss - organizations can focus remediation efforts on the vulnerabilities that actually matter
• +2 more outcomes

Segments4 records

Ideal customer profiles4 records

Technology focussed Yes

API detail

Has API

No

API docs

API detail

Core technology

AI maturity

App detail

Feature5 records

Partnerships

One partnership is on record.

• Cyber Insurance CarrierscoreStrategic or Co-development PartnerRoot Evidence has been working with leading cyber insurance carriers, helping them scan portfolios to identify vulnerabilities that historically result in multi-million dollar payouts. Through this work, Root Evidence identified that less than 1% of CVEs drive financial loss. The carriers' loss data informs Root Evidence's Evidence Scan platform and the Mythos-era warranty is underwritten by these insurance industry partners.

Scale indicators4 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• SecurityScorecard: SecurityScorecard delivers external attack surface ratings consumed by enterprises and insurers, directly competing with Root Evidence's scan-and-score approach to vulnerability prioritization.
• Tenable: Tenable is the leading enterprise vulnerability management platform (Nessus, Tenable One) directly competing with Evidence Scan in identifying and prioritizing vulnerabilities across the external attack surface.
• Qualys: Qualys VMDR is a cloud-native vulnerability management, detection, and response platform that competes head-to-head with Evidence Scan for enterprise prioritization budgets.
• Rapid7: Rapid7 InsightVM provides vulnerability management and analytics for enterprise security teams, offering risk-based prioritization comparable to Root Evidence's evidence-based approach.
• Wiz: Wiz is a cloud security platform whose agentless vulnerability and exposure prioritization capabilities target similar enterprise CISOs evaluating evidence-based risk reduction.
• Bitsight: Bitsight provides cyber risk ratings heavily used by cyber insurance underwriters and enterprises to quantify financial exposure — a closely adjacent capability to Root Evidence's insurance-loss-based prioritization.

Broad incumbents

• CrowdStrike: CrowdStrike Falcon Spotlight provides vulnerability management as part of its broader endpoint and cloud security platform — competing with Root Evidence from a much larger portfolio of security offerings.

Emerging players

• Orca Security: Orca Security is an agentless cloud security platform with vulnerability prioritization capabilities aimed at cloud-native enterprises, partially overlapping with Evidence Scan's external attack surface focus.
• Vicarius: Vicarius offers vulnerability remediation prioritization for mid-market and enterprise teams, competing in the risk-based prioritization niche that Root Evidence targets with insurance-grade data.

Others

• Balistic Ventures (Portfolio): Ballistic Ventures is Root Evidence's lead seed investor and a cybersecurity-focused VC with portfolio companies in adjacent security categories; comparable as the source of capital, talent network, and partnership ecosystem that Root Evidence can leverage.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat4 records

Key risks6 records

Key highlights6 records

Customer concentration

• Xx.com/rootevidence
• Facebookfacebook.com/rootevidence
• LinkedInlinkedin.com/company/rootevidence
• Instagraminstagram.com/rootevidence

Revenue estimate

Valuation estimate

Number of profiles

Profiles4 records

Funding overview

Funding rounds1 record

Investors2 records

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about Root Evidence