Mondoo

Mondoo provides a security platform designed to manage and reduce cyber exposure across a company's entire IT infrastructure. The platform operates by continuously discovering and inventorying all assets within a client's environment, including on-premises servers, cloud services, SaaS applications, and employee endpoints.

The core of the service is to identify, prioritize, and remediate security vulnerabilities and misconfigurations. It uses a data fabric to analyze security data, helping organizations to understand and address the risks that are most critical to their business operations. The system is built to automate security and compliance processes, integrating into the development lifecycle from the initial build to runtime operations.

The business model appears to be subscription-based, offering different tiers of its platform, including a free open-source option and licensed commercial versions. Mondoo targets a broad market, from individual developers and small teams to large enterprises, by providing tools that can be used for a wide range of systems such as bare-metal servers, virtual machines, cloud environments, containers, and Kubernetes. The company generates revenue by licensing its platform, which offers a unified framework for security scanning and insights into complex IT environments.

Keywords: exposure management, infrastructure security, vulnerability assessment, compliance automation, cloud security, cnquery, security analytics, misconfiguration management, IT asset inventory, DevSecOps