What Is Emphere: The AI Startup Automating Software Security One Patch at a Time

Most cybersecurity companies are great at spotting problems. Finding the flaw, flagging the flaw, filing the ticket. That part? Solved a dozen times over. The harder part is fixing the flaw. Fast. Reliably. At scale.

That is exactly what Emphere is built to do.

This Seattle-based startup is going after one of the most quietly painful gaps in software security. And the early signs suggest they are not just solving a real problem. They are solving one that has been sitting in plain sight for years.

What Is Emphere and What Does It Do?

Emphere is a Seattle-based cybersecurity startup that uses AI to automatically fix software security vulnerabilities. It spun out of the AI2 Incubator, based at Pier 70 in Seattle, and focuses on a very specific part of the software supply chain: open-source operating system distributions.

Here is the kicker. Most modern software applications run inside what are called “containers.” These containers are built on top of open-source distributions like Ubuntu, Debian, and Alpine Linux. Those distributions accumulate known security flaws constantly. And when a software company builds its product on top of these systems, every one of those flaws comes along for the ride.

So the vendor ships software. The software has vulnerabilities baked in. Not because they were careless. But because the foundation under their product had cracks, and nobody patched them in time.

Emphere patches them. Automatically. Without the software company having to scramble, pull engineers off roadmap work, or wait weeks for someone to get to the ticket.

The company’s stated mission is to close the gap between detecting a security flaw and actually fixing it. That gap, in the real world, can stretch from days to months. During that entire window, the software is exposed.

How Emphere Automatically Fixes Software Vulnerabilities

Let’s be honest about how vulnerability remediation actually works at most companies right now. A scanner finds a flaw. A ticket gets created. That ticket sits in a queue. An engineer eventually picks it up, investigates it, writes a fix, tests the fix, and deploys it. Somewhere between step one and step seven, weeks have passed.

Emphere collapses that entire chain.

The platform’s AI takes security findings and turns them into production-ready fixes without requiring a human engineer to do the heavy lifting. And here is the part that matters most to the people buying it: Emphere patches the container images companies already use. It does not ask customers to throw out their existing infrastructure and start over. It works with what they have.

That is a deliberate choice. And a smart one. Getting an enterprise to change the foundation their software runs on is a long, painful, political process. Saying “we will just fix what you already have” removes most of that friction.

But good intentions are not enough. So Emphere goes a step further. They have two dedicated security researchers on the team whose entire job is to attack Emphere’s own patched images. If a fix does not hold up under a simulated attack, it does not ship. Period. That is serious quality control for a five-person operation. And it tells you a lot about how the founders think.

Who Founded Emphere and What Is Their Background?

Ankit Kumar is the CEO. Pallav Gupta is the CTO. They met as roommates at Northeastern University. And when you hear their work histories back-to-back, you realize this company was almost inevitable.

Kumar spent six years in security at Uber. His job was opening vulnerability tickets. Finding the flaws, flagging them, sending them to the engineering team.

Gupta worked as an engineer at CarGurus and Twitter. His job was being on the other end of those tickets. Taking the flagged flaws and figuring out how to actually fix them. One lived the detection side. The other lived the remediation side. For years. Separately, at different companies.

The reality is, most startups are built on theory. Emphere is built on shared, firsthand frustration with a broken process that both founders lived through from opposite angles. That is not a pitch deck story. That is a real problem that two people got tired of watching remain unsolved.

Kumar has been direct about what drives the urgency. “Remediation is going to be as important as detection,” he said, “given the fact that exploitation is going to be super, super fast.” He noted that the companies Emphere serves operate in environments where a single critical vulnerability can get an entire software product blocked from deployment. One flaw. Millions in sales at risk.

So they built Emphere. Five people. Two of them spending their days trying to break the product. That is the team.

Emphere’s $2.1M Pre-Seed Funding Round Explained

On June 4, 2026, Emphere announced a $2.1 million pre-seed funding round. Two investors backed it: the AI2 Incubator and Outsiders Fund.

The AI2 Incubator is where Emphere was built, so that backing makes sense. They know the founders, they watched the company take shape, and they put money behind what they saw. But the more interesting signal is the Outsiders Fund.

The firm was co-founded by Austin McChord. McChord built Datto, a data backup and infrastructure company, and sold it in 2017. That background matters. Outsiders Fund is not a generalist VC firm writing checks into anything that uses the word “AI.” They have a specific lens: infrastructure pain. The kind of invisible, unglamorous, deeply annoying technical problems that enterprise software teams deal with every day.

When a firm like that backs a pre-seed security startup, it means they believe the problem is both real and underserved. That is not a small thing. And the other signal is even cleaner: Emphere already has paying customers. The company has early revenue and a handful of signed customers before completing even a seed round. They declined to name those customers publicly. But generating revenue at pre-seed, before the product has had time to scale, is a strong indicator that the market was ready and waiting for exactly this.

The funding will go toward growing the customer base and building out the platform further.

Which Industries Does Emphere Serve?

Emphere is not trying to serve everyone. That is the right call.

Their focus is on software companies that sell to regulated industries. Banking. Finance. Healthcare. Government. The kinds of buyers who do not just want secure software. They require it, legally and contractually.

Here is how that plays out in practice. A B2B software vendor wants to sell their product to a bank. The bank runs an automated security scanner on the vendor’s software container before they agree to anything. That scanner is not forgiving. If it finds a single “Critical” or “High” severity vulnerability, the deployment gets blocked. The deal stops. Potentially millions in contract value, stalled over a flaw that may have been sitting in an open-source layer the vendor did not even know about.

That is not a hypothetical scenario. That is a Tuesday for a lot of software companies. And the numbers behind the problem make it worse. The National Vulnerability Database had a backlog of more than 27,000 unprocessed flaws as of a May 2026 government report. New vulnerabilities are projected to surpass 60,000 in 2026 alone. That is nearly ten times the rate of a decade ago.

No engineering team on earth can manually patch at that pace. The volume has simply outgrown the human capacity to handle it. Emphere exists because that math stopped working, and someone needed to automate the answer.

How Emphere Compares to Other Cybersecurity Startups

The security market is not short on companies. But most of them are playing the same game: find the vulnerability, generate an alert, hand it off.

Emphere plays a different game entirely. The product is focused on remediation, not detection. That is a meaningful distinction. Detection companies create noise. Emphere creates fixes.

The closest comparison in the market is Chainguard, a Kirkland, Washington-based company currently valued at $3.5 billion. Chainguard is known for secure, pre-built software container images. Strong product. Real traction. But there is one key difference in how the two companies go to market.

Chainguard generally asks customers to adopt its container images. You swap out what you have for what Chainguard has built. Emphere patches the images you already use. No migration. No ripping out infrastructure. No convincing a cautious engineering team to trust a new foundation.

So they are not the same product, even though they are operating in overlapping territory. Chainguard is asking customers to switch. Emphere is asking customers to just let it fix what is already there. For a lot of enterprise buyers, that second conversation is much easier to have.

What’s Next for Emphere After Its Funding?

Emphere is early. Very early. Five people, $2.1 million, a handful of customers.

But the foundation is legitimate. The founders understand this problem from the inside. The investors have seen infrastructure pain at scale and chose to back it anyway. And customers are already paying before the company has finished building.

Kumar has said the immediate plan is straightforward: grow the customer base and keep building the platform. And longer term, Emphere is looking beyond open-source distributions. The company has broader ambitions around software security at multiple layers of the build process, though specifics have not been shared publicly.

The window is real. With over 60,000 new vulnerabilities projected in 2026 and the exploitation window shrinking every year, the companies that figure out how to automate remediation at scale will define what software security actually looks like going forward. Emphere is betting it can be one of those companies. And right now, the early evidence says the bet is not unreasonable.

Emphere Raises $2.1 Million to Automate Software Vulnerability Patching

Emphere Business Model