What Root is
Acquired by Aikido. Root provides backported patches for major linux distros enabling security teams to remove CVEs without changing their infrastructure. They also provide automatic image updaters, and minimal container images. The vendor site is www.root.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Root covers
Root is in the catalog for these capabilities. Categories: Container Vulnerability. Catalog tags: Best for Enterprise and Acquired.
How to evaluate Root in a security program
Use Root as a stack candidate, not as diligence evidence. The oneNorma score for Root is 4.8/10 (percentile 34). If the real gap is in Container Vulnerability, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.root.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
