Root

Root is a cybersecurity company based in Boston, United States working in application security, cloud security.

Root is a container and open-source security company offering autonomous, in-place vulnerability remediation for container images and application dependencies. Its platform applies backported security fixes to customer-owned images and dependencies without rebuilds, forced upgrades or workflow changes. Its main offerings are the Root Image Catalog, a set of continuously remediated base images, and the Root Library Catalog, which patches application dependencies at the versions customers run. Root publishes SBOMs, VEX statements, diff files and provenance with each fix, and offers Standard and Enhanced remediation SLAs. The company serves enterprise and public sector customers, including regulated and national security environments, and is a member of CNCF, OWASP and OASIS.