Echo Software has acquired key assets from Minimus after Minimus decided to wind down operations, expanding Echo’s hardened open-source software platform while giving existing Minimus customers a path to keep using related technology.
Echo said Minimus had developed technology that fits strategically with its own approach to software supply chain security, which focuses on replacing vulnerable upstream software with hardened alternatives rather than relying solely on vulnerability detection after deployment.
The transaction adds Minimus technology, technical data and integrations with legacy security vendors to Echo’s existing software ecosystem.
One particularly important component is Minimus’ operating system technology.
Echo rebuilds open-source software from source and distributes hardened artifacts designed to function as replacements for commonly used upstream components. The company said Minimus’ OS capabilities expand that model across additional Linux distributions, supporting Echo’s goal of providing a distro-agnostic approach to hardened software.
The company plans to extend Minimus’ integrations so Echo artifacts can be recognized by a wider range of vulnerability scanners and other enterprise security tools.
Echo also uses proprietary AI agents across its software factory to investigate vulnerabilities, develop patches, validate remediation and continuously maintain hardened versions of open-source software.
The Minimus acquisition provides additional technical inputs that Echo believes can improve those automated research and remediation systems.
Echo currently provides hardened container images, software libraries, virtual machines, operating system packages, Helm charts and other open-source artifacts.
The acquisition comes as the company describes the secure-by-default open-source software market as consolidating around fewer providers, including Echo and Chainguard.
For Minimus customers, the transaction is intended to preserve continuity after the company winds down rather than leaving existing users without support for the underlying technology.
KEY QUOTES:
“When it became clear that Minimus was going to close, we saw an opportunity to make sure that work didn’t disappear. We’re bringing the best of what they built into Echo, while giving their customers a secure and straightforward path forward.”
Eilon Elhadad, CEO And Co-Founder Of Echo
“Echo shares our belief that software should be secure by default, and has built the platform and engineering capabilities to take that vision even further.”
Ben Bernstein, Co-Founder And CEO Of Minimus
