Free tools Windows power users keep installed
One-click scans. No signup required.
Mondoo announced $17.5 million in additional funding on September 30, 2025. HV Capital led the round, joined by new strategic investor T.Capital and existing investors Atomico, Firstminute Capital and System.One. Mondoo said the investment brings its total funding to $32.5 million.
What the funding round covers
SecurityWeek described the transaction as a Series A extension. Mondoo said the proceeds will support go-to-market acceleration, expansion in the United States and Europe, the Middle East and Africa (EMEA), continued platform development, and strategic partner channels. The company did not disclose how the $17.5 million will be divided among those priorities.
Mondoo also reported that, in the preceding year, revenue grew 7x, customer expansion reached 4.4x, and revenue targets were exceeded by 62%. These are company-reported figures, not independently verified results. Mondoo’s announcement gives the company’s account of the round, while SecurityWeek’s coverage identifies it as a Series A extension.
What Mondoo’s platform is designed to do
Mondoo describes its product as agentic vulnerability management: software agents that continuously monitor environments, identify security issues, rank them in context and help produce fixes. Its stated coverage includes cloud and on-premises infrastructure, SaaS, endpoints and software-lifecycle environments.
Recommended Free Tools
#1 Best Overall
The intended workflow extends beyond finding vulnerabilities. Mondoo says its platform prioritizes issues using business impact and exploitability, generates remediation code, integrates with IT service management (ITSM) systems, and detects or fixes configuration drift—the return of an environment to a state that no longer matches its intended configuration.
How the approach differs from conventional vulnerability management
Many vulnerability-management tools identify and rank findings; teams then decide what to fix, create or route tickets, and carry out remediation through separate processes. Mondoo presents its platform as an effort to connect those stages. The following distinctions describe the company’s positioning, not an independent comparison of product performance.
| Workflow area | Conventional approach described in the announcement | Mondoo’s stated approach |
|---|---|---|
| From finding to fix | Tools may identify or rank findings, leaving remediation to separate team processes. | Connects detection with prioritization and remediation support. |
| Prioritization | Teams may need to sort through findings and decide which warrant action. | Ranks issues using business impact and exploitability. |
| Ticketing and coordination | Manual ticket creation and handoffs can form part of the response. | Integrates with ITSM systems to orchestrate workflow. |
| Recurring problems | A one-time fix may not prevent the issue from returning. | Claims to detect or fix drift and help prevent recurrence. |
| Remediation changes | Fixes may be carried out outside the scanner’s workflow. | Generates code intended to be reviewed, approved, versioned and rolled back. |
Mondoo says teams can work through a graphical interface, command-line interface (CLI), CI/CD integrations and chat. Its remediation-code workflow is presented as reviewable rather than fully opaque automation: teams can inspect and approve changes before applying them, then track versions or roll them back. Those capabilities may reduce handoffs, but organizations still need to validate proposed changes in their own environments.
Why the funding matters to security teams
The operational problem Mondoo is addressing is the distance between discovering a vulnerability and getting a safe, durable fix into production. Mondoo cited more than 40,000 new CVEs in 2024, a 39% increase from 2023, drawing on National Vulnerability Database figures. A growing stream of disclosures can make triage and remediation capacity as important as detection itself. Mondoo’s 2025 discussion of the NVD figures provides that context.
Funding could give Mondoo more capacity to develop the platform, reach customers in the US and EMEA, and build partner channels. For security teams, those stated priorities matter if they translate into support for more environments and smoother integration with existing tools. The announcement does not establish that the funding will reduce customers’ remediation times or costs; those outcomes depend on deployment, workflow fit and the quality of proposed fixes.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Company background
Mondoo says it was founded in 2020 by DevOps and security experts associated with Chef InSpec, DevSec.io and OpenStack. Its co-founders include Soo Choi-Andrews, Christoph Hartmann and Dominik Richter. More company background is available in Mondoo’s company information.
Quick Recap
Best Value
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
