root.io

root.io, previously known as Slim.AI, is a company dedicated to enhancing software supply chain security. Founded in 2020, the company operates out of Boston and Tel Aviv and has raised $40.5 million in funding. As part of its transition, root.io will discontinue Slim.AI services, including their SaaS product and Docker Desktop Extension, effective March 31, 2024. The company is focused on building solutions that promote transparency, trust, and collaboration between software producers and consumers. Root.io analyzes an average of 125,000 software containers weekly and has joined the AWS Partner Network’s Global Startup Program as a Verified partner. The company has achieved SOC 2 compliance and offers a Docker Extension for Docker Desktop, a Shield Orb for CircleCI to automate container hardening, and a Community Images Repository on GitHub. Root.io has integrated vulnerability scanners Grype and Trivy into their platform and added vulnerability prioritization features for cloud-native teams. The company partners with AWS, is available in the AWS Marketplace, and regularly attends AWS-sponsored events. Root.io’s proprietary software product, Vectr.io, is used for security management processes. The company has a low barrier to entry for teams with limited experience with Infrastructure-as-Code (IaC) and has automated security checks in the CI/CD pipeline. Root.io has successfully reduced container attack surfaces by more than 50% before any direct patching or compensating controls. Currently, the company is stepping back into stealth mode to focus on working with design partners and building up their new product, with plans to re-emerge soon.