Emphere Raises $2.1 Million to Automate Software Vulnerability Patching

The cybersecurity industry has spent years getting really good at finding problems. Scanners, monitors, detection tools — they are faster and sharper than ever. But finding the flaw is only half the job. Fixing it is where everything slows down, breaks down, and quietly burns out engineering teams across the world.

That is the problem Emphere is going after. And on June 4, 2026, the Seattle-based startup announced it had raised $2.1 million in pre-seed funding from AI2 Incubator and Outsiders Fund. Not to build another scanner. Not to flag more vulnerabilities. To fix them. Automatically.

The reality is, this is a much harder problem than detection. And most of the industry has been ignoring it.

What Is Emphere and What Does It Do?

Emphere is a security startup that automates the process of fixing software security flaws. Simple as that. No complicated pitch. No ten-slide problem statement needed.

The company focuses on open-source distributions – Ubuntu, Debian, and Alpine – and automatically patches known vulnerabilities in those distributions for software companies that sell to banks and other regulated industries. So when a flaw surfaces in Ubuntu, Emphere’s platform patches the affected container images before a developer even has to write a single line of fix code.

Here is the kicker. Regulated industries like banking and financial services have near-zero tolerance for unpatched software. Compliance mandates demand fast remediation. Not eventually. Now. Emphere is built exactly for that pressure.

And the company already has early revenue. A handful of signed customers. They declined to name them, but paying customers at pre-seed stage is not a small thing.

Emphere Raises $2.1M in Pre-Seed Funding

The round closed on June 4, 2026, with $2.1 million. Pre-seed. Backed by AI2 Incubator and Outsiders Fund.

That number might feel modest compared to the headline rounds that dominate tech news. But for a five-person team at this stage, it is exactly what you want. Enough to build. Enough to grow the customer base. Not so much that you lose the discipline that early-stage startups need to survive.

Emphere plans to use the capital to grow its customer base and keep building out the platform. Longer term, it is looking to expand into other areas of how software gets built and secured. That is the right answer. One problem, solved well, then expand. Founders who try to boil the ocean at pre-seed rarely make it past Series A.

So this $2.1 million raise is not just a funding announcement. It is a signal that automated remediation is becoming a real category, and Emphere is planting its flag early.

Who Are Emphere’s Founders?

CEO Ankit Kumar and CTO Pallav Gupta. They met as roommates at Northeastern University. And they spent the years after graduation on opposite sides of exactly the problem Emphere is solving.

Kumar spent six years in security at Uber. His job was finding vulnerabilities and opening tickets. Raising the alarm. Gupta worked on the engineering side at CarGurus and Twitter. His job was receiving those tickets and fixing them, while also shipping product on deadline. One wrote the tickets. The other had to close them. Both lived the friction from different seats.

That is not a manufactured founder story polished for a pitch deck. That is a genuinely rare setup. Most security startups are built by either security people or engineers. Emphere has both, in one partnership, with complementary scars from the same war.

And they did not go looking for a problem to solve. The problem found them, for years, before they decided to build something about it.

Who Invested in Emphere?

Two investors. Both worth paying attention to for different reasons.

Emphere spun out from AI2 Incubator, the Seattle startup program based at Pier 70. AI2 is backed by the Allen Institute for AI. That is not a typical accelerator. It produces technically serious, research-grounded companies. Spinning out of AI2 gives Emphere credibility and infrastructure that most pre-seed startups have to spend years building on their own.

The second backer is Outsiders Fund, co-founded by Austin McChord, who built data-backup company Datto and sold it in 2017. And this is where it gets interesting. McChord is not a generalist investor writing checks into sectors he learned about from a pitch deck. He lived inside the infrastructure pain for years. He knows what it costs when software maintenance breaks down at scale.

When an operator with that background puts money into a company fixing the vulnerability remediation problem, it is worth taking seriously. That is not a bet on a trend. That is a bet on a real market need he has personally felt.

The Problem Emphere Is Trying to Solve

Let’s be honest about how bad the situation actually is.

A federal watchdog report published in late May 2026 found that the National Vulnerability Database had a backlog of more than 27,000 unprocessed software flaws. Twenty-seven thousand. And the same report projected that newly discovered vulnerabilities will surpass 60,000 in 2026 alone. That is nearly ten times the number from a decade ago.

Human teams cannot keep up. It is not a people problem. It is a math problem. The volume of incoming threats has outpaced what any manual remediation workflow can handle.

And open-source software makes it worse. A single unpaid volunteer is often the only person maintaining a block of code that runs inside thousands of enterprise products. When a vulnerability appears in that code, every company built on top of it has a problem. Most of them do not even know it yet.

What this creates, practically speaking, is a gap between detection and remediation that keeps getting wider. Developers get buried in security tickets while trying to ship product. Security teams raise alarms that engineering teams cannot respond to fast enough. The whole system runs on friction, frustration, and hope.

That is the gap Emphere is stepping into.

How Emphere Fixes Software Vulnerabilities Automatically

The approach is focused and deliberate. Emphere monitors open-source distributions for known vulnerabilities. When one is found, the platform automatically patches the affected container images that its customers ship. The fix is applied at the distribution level, not the application level. That means one patch covers many customers at once.

But here is what separates Emphere from a tool that just runs scripts. Its five-person team includes two dedicated security researchers whose entire job is to attack Emphere’s own patched images. They try to break what the platform fixes. If the patch does not hold up under a real attack, they know before the customer ever sees it.

That is a meaningful quality bar. And it is the kind of thing that matters when your customers are software vendors selling to banks.

The focus on Ubuntu, Debian, and Alpine is also a strategic choice, not an accident. These distributions are the backbone of an enormous portion of enterprise software. Winning here means Emphere is relevant to a huge slice of the software supply chain without needing custom integrations for every possible stack. Nail the foundation. Everything else follows.

What Will Emphere Do With the Funding?

Grow the customer base. Keep building the platform. And longer term, expand into other parts of how software gets built and secured. That is the short version. Here is the longer one.

Emphere is already generating early revenue. Signed customers in regulated industries at the pre-seed stage. That tells you the product is working well enough that security-conscious buyers, in one of the slowest-moving procurement environments in tech, are paying for it. That is not easy to do.

The funding will go toward expanding the engineering team, scaling infrastructure, and accelerating customer acquisition. All the right places for a company at this stage.

But the more interesting signal is the longer-term ambition. Expanding into other areas of how software gets built and secured suggests Emphere sees vulnerability patching as the starting point, not the whole business. The software supply chain has plenty of other broken workflows. A company that proves it can automate the fix layer for banks has a real path into every other regulated, security-critical vertical.

Emphere raising $2.1 million is a quiet announcement. No flashy valuation disclosed. No celebrity investor attached. Just a tight team, a real problem, paying customers, and two founders who have been living this pain since they were college roommates. Sometimes those are the ones to watch.

What Is Emphere

Emphere Business Model