Root Evidence

Root Evidence, launched publicly in July 2025 and based in Boise, Idaho, builds an “evidence-based” vulnerability management platform aimed at a specific failure mode of the category: most tools still rank remediation priority by generic severity scores (like CVSS) or broad “known exploited” lists, leaving security teams to wade through thousands of findings that are technically severe but have little evidence of real-world exploitation against their specific environment. Root Evidence instead focuses prioritization on the comparatively small share of vulnerabilities with direct, concrete evidence of exploitation, aiming to cut remediation noise and let teams focus limited capacity where it demonstrably matters.

The company was co-founded by CEO Jeremiah Grossman, the founder of WhiteHat Security and a well-known figure in application security research, and CTO Robert “RSnake” Hansen, a longtime security researcher known for his work on web application attack techniques. That pedigree helped the company raise an oversubscribed $12.5 million seed round led by Ballistic Ventures, a venture firm focused specifically on cybersecurity, with participation from Grossman Ventures.

In March 2026 the company announced the Enterprise Preview of its Evidence Scan product, extending its evidence-based approach toward broader enterprise deployment. Root Evidence is still pre-revenue or early-revenue by most public accounts, with no disclosed named customers or independent efficacy benchmarks yet, so its real-world impact remains to be proven even though its thesis and founding team are well regarded in the security research community.