Security Roots Ltd

We started Security Roots Ltd in 2010 to build software for information security specialists. Our main product, the Dradis Framework, is pentest management software that helps streamline pentesting, improve collaboration, and automate reporting. Dradis comes in two versions: Dradis Pro, a self-hosted solution for on-premises use, and Dradis CE, an open-source project we started in 2007. Our goal is to reduce the administrative burden of security engagements so security teams can focus on actual testing.

With Dradis, you can easily combine scan output, notes, and evidence. We help you create client-ready reports using built-in QA and reusable templates, and deliver results faster through report export, publication to a client portal, or integrations with ticketing systems. Dradis manages the entire pentest, from initial questionnaires and team coordination to tracking progress, enforcing QA, and delivering results through a dynamic client portal. It imports findings from tools like Nessus, Burp, and Nmap, and integrates with systems such as Jira, Azure DevOps, or ServiceNow for tracking remediation.

We serve over 1,154 InfoSec teams in 75 countries, including security consultancies, software and hardware vendors, internal security teams, and freelancers. We are a small, independent, and self-funded software vendor.

Our mission is to help information security teams make systems more secure by reducing the administrative work involved in managing and discussing security assessment results.

We operate based on several core beliefs: we put people first in everything we do; we see information security as a team effort that thrives on clear communication; our product roadmap is shaped by customer feedback and our vision; and we respect data sovereignty, meaning all data you put into Dradis belongs to you.

We aim for slow, sustainable growth, always prioritizing customer needs and product quality.

We operate as a small, fully remote, and distributed team, with members located in countries like Brazil, Malaysia, Poland, South Africa, Spain, Thailand, the UK, and the US.

Our team is humble, friendly, and talented, sharing a commitment to our craft and to serving the information security industry. We emphasize flexible hours and strongly value work-life balance.

We focus on a user-centered approach, aiming to make each product release the best it can be. We believe that by providing excellent tools and support, we earn client trust and business.

We offer competitive salaries based on your location, ensuring your earnings are above regional averages. We also strongly respect your work-life balance, which includes a minimum of four weeks of time off.

Here are some other perks you can expect:

• Direct impact on our company’s direction
• Support for your personal and professional growth
• Autonomy in choosing your work tasks
• Participation in yearly company retreats
• Opportunities for conference and training visits
• All necessary hardware and tools
• A culture that supports continuous learning