We kept asking why nobody had built this. So we built it.
Root Evidence is a vulnerability management company built by veterans of application security, offensive research, and cyber insurance. We started Evidence because breaches kept happening on a knowable set of vulnerabilities while security teams worked through endless backlogs of theoretical risk.
Security breaches have a human cost.
99%
of CISOs fear losing their job after a breach.
<1%
of CVEs are FIREs: the vulnerabilities proven by real incident and insurance claim data to cause financial loss.
We built Evidence because we knew the human stories behind the statistics. We knew people who worked tirelessly to reduce risk with every tool they had and still got breached. We knew others whose tenures were cut short because they couldn't translate their work into board-ready metrics.
We got tired of watching good people lose winnable fights.
We kept seeing things we couldn't believe no one had tried to solve.
Map the internet
No one had ever mapped the entire internet to find every externally reachable asset and tie it to its owner. So we did.
Evidence Surface →Find the FIREs
No one had ever made the list of CVEs that caused real financial losses. So we did.
Evidence Scan →Back it with money
No one had ever made a vuln management product they believed in enough to back it with a warranty. So we did.
The Mythos Warranty →Pleased to meet you.
The people behind Evidence.
Jeremiah Grossman
Chief Executive Officer
Secured Yahoo's websites for over a hundred million users, founded WhiteHat Security in 2001, and helped build web application security into a discipline. Served as Chief of Security Strategy at SentinelOne through its IPO, then co-founded Bit Discovery, acquired by Tenable in 2022. Since Black Hat 2014 he has argued that security vendors should warranty their products. Root Evidence is where he stopped waiting for the industry to catch up.
Robert "RSnake" Hansen
Chief Technology Officer
Built eBay's anti-fraud and anti-phishing systems, pen-tested over 2,100 banks and critical systems at SecTheory, and is credited with discovering or formalizing Slowloris and Clickjacking. VP of Labs at WhiteHat Security, co-founder of Bit Discovery. At Root Evidence he leads the engineering and detection work behind the FIRE list, the EASM architecture, and the data pipeline.
Heather Konold
Chief Operating Officer
Scaled operations and led strategic M&A across high-growth cybersecurity organizations for 20+ years, guiding WhiteHat Security through its acquisition by NTT Security and Bit Discovery through its acquisition by Tenable. At Root Evidence she runs the business behind the platform: operations, finance, people, and partnerships, from first design partner to GA.
Lex Arquette
Chief Product Officer
25+ years designing and building software products. As a founding UI engineer on Facebook's Growth team he built the first ten minutes of every new user's experience, shipped interfaces used daily by a third of the world, and co-invented Facebook Live. Co-founded and exited WhiteHat Security and Bit Discovery. At Root Evidence he leads product and design across the platform.
Get in touch.
For demos, warranty quotes, partnerships, press, or anything else. We answer fast.