We kept asking why nobody had built this. So we built it.
Root Evidence is a vulnerability management company built by veterans of application security, offensive research, and cyber insurance. We started Evidence because breaches kept happening on a knowable set of vulnerabilities while security teams worked through endless backlogs of theoretical risk.
Security breaches have a human cost.
99%
of CISOs fear losing their job after a breach.
<1%
of CVEs are FIREs: the vulnerabilities proven by real incident and insurance claim data to cause financial loss.
We built Evidence because we knew the human stories behind the statistics. We knew people who worked tirelessly to reduce risk with every tool they had and still got breached. We knew others whose tenures were cut short because they couldn't translate their work into board-ready metrics.
We got tired of watching good people lose winnable fights.
We kept seeing things we couldn't believe no one had tried to solve.
Map the internet
No one had ever mapped the entire internet to find every externally reachable asset and tie it to its owner. So we did.
Evidence Surface →Find the FIREs
No one had ever made the list of CVEs that caused real financial losses. So we did.
Evidence Scan →Back it with money
No one had ever made a vuln management product they believed in enough to back it with a warranty. So we did.
The Evidence Warranty →Pleased to meet you.
The people behind Evidence.
Jeremiah Grossman
Chief Executive Officer
Secured Yahoo's websites for over a hundred million users, founded WhiteHat Security in 2001, and helped build web application security into a discipline. Served as Chief of Security Strategy at SentinelOne through its IPO, then co-founded Bit Discovery, acquired by Tenable in 2022. Since Black Hat 2014 he has argued that security vendors should warranty their products. Root Evidence is where he stopped waiting for the industry to catch up.
Robert "RSnake" Hansen
Chief Technology Officer
Built eBay's anti-fraud and anti-phishing systems, pen-tested over 2,100 banks and critical systems at SecTheory, and is credited with discovering or formalizing Slowloris and Clickjacking. VP of Labs at WhiteHat Security, co-founder of Bit Discovery. At Root Evidence he leads the engineering and detection work behind the FIRE list, the EASM architecture, and the data pipeline.
Heather Konold
Chief Operating Officer
20+ years scaling cybersecurity companies. Led finance, HR, and strategy at WhiteHat Security and Bit Discovery.
Lex Arquette
Chief Product Officer
25+ years building large-scale software. Early Facebook Growth engineer and co-inventor of Facebook Live; co-founder at WhiteHat Security and Bit Discovery.
Get in touch.
For demos, warranty quotes, partnerships, press, or anything else. We answer fast.