Root Evidence

Root Evidence is a cybersecurity company developing a product called "Evidence," focused on evidence-based vulnerability management. The company's core premise is that a small fraction of known vulnerabilities (less than 1%) represent meaningful real-world risk, and that organizations should prioritize remediation based on proof of which vulnerabilities are actively known to cause damage rather than theoretical severity scores.

The Evidence platform is designed to help enterprises cut through vulnerability noise by providing proof-driven prioritization, enabling security teams to focus remediation efforts on the vulnerabilities that pose the most tangible risk if left unaddressed. The product is currently in early development, with an early access program available to enterprise organizations that want to influence its direction.

The company was founded by a team with shared backgrounds in web application security and attack surface management:

• Jeremiah Grossman (CEO): Formerly a security officer at Yahoo, founder of WhiteHat Security and Bit Discovery
• Robert "RSnake" Hansen (CTO): Known for discovering Clickjacking, Slowloris, and DNS Rebinding techniques; former leader at WhiteHat Security and Bit Discovery
• Heather Konold (COO): Operations executive with experience scaling venture-backed cybersecurity companies including Bit Discovery
• Lex Arquette (CPO): Early engineer on Facebook's Growth team and co-founder of WhiteHat Security and Bit Discovery

Root Evidence also maintains a community called the "Evidence Army," a network of security leaders, engineers, and researchers aligned around the goal of bringing clarity to vulnerability management. The company's target market is enterprise security teams seeking to reduce remediation burden by focusing on vulnerabilities with demonstrated real-world impact.