Vicarius
Vicarius sells vRx, a platform that finds vulnerabilities on endpoints and servers, ranks them by real risk and then fixes them, by patching the operating system and third-party apps, running scripts, or shielding software in memory when no patch exists.
CyberReviewed Editorial Team · Updated · vicarius.io
Company details
- Score
- 7.4/10Ranked 12 of 22
- Category
- Vulnerability management
- Founded
- 2016
- Headquarters
- New York, New York
- Leadership
- Roi Cohen, co-founder and CEO
- Funding disclosed
- About $56.7 million, including a $30 million Series B in 2024
- Pricing
- Quoted per managed endpoint; $600 a year for 10 endpoints in the Americas (AWS Marketplace)
- Best fit
- Lean IT and security teams that want one tool to find and patch vulnerabilities
Our take
Vicarius suits IT teams that are tired of passing scan reports to someone else and want the same tool to find, rank and fix vulnerabilities, including third-party apps and systems that cannot be patched. Its AWS Marketplace price of $600 a year for 10 endpoints makes it easy to trial, though reviewers find the patch deployment screens fiddly.
Scores by criterion
| Criterion | Score |
|---|---|
| Pricing transparency | 6.1 |
| Product scope and fit | 8.0 |
| Company durability | 7.3 |
| Evidence of adoption | 7.9 |
| Ease of adoption | 7.6 |
| Overall score (average of the five) | 7.4 |
Each criterion is defined on our methodology page.
Find and fix in one place
vRx scans endpoints and servers with or without an agent, scores each vulnerability by exploitability and business context, and then remediates it.1 Patching covers the operating system and more than 20,000 third-party applications on Windows, macOS and Linux, and a scripting engine runs built-in, AI-generated or community scripts for fixes that a patch cannot make.1 When patching is not possible, vShield protects vulnerable software in memory, and a compliance engine checks more than 100 CIS benchmarks along with PCI DSS, HIPAA and CMMC.1 Gartner placed Vicarius in its 2025 Magic Quadrant for Exposure Assessment Platforms.1
Priced per endpoint
Vicarius quotes prices on its website, based mainly on the number of managed endpoints with the vRx agent installed, on annual or multi-year terms, and offers managed service providers a separate consumption model.2 Its AWS Marketplace listing gives a list price of $600 a year for 10 endpoints in the Americas, or $60 per endpoint per year.3
Eight years of pivots
Michael Assraf registered Vicarius as an Israeli company on May 23, 2016, and founded it with Roi Cohen and Yossi Ze'evi.45 The first product was a permission manager for operating system functions meant to block malware, and customer feedback steered it toward vulnerability assessment, prioritization, patching and scripting.4 It raised a $5 million seed round, a $24 million Series A in February 2022 led by AllegisCyber Capital, JVP and AlleyCorp, and a $30 million Series B in January 2024 led by Bright Pixel Capital, bringing its total to about $56.7 million.65 At the Series B it had more than 400 customers, including PepsiCo, Hewlett Packard Enterprise and Equinix.5 Assraf stepped down as CEO in 2024 and Roi Cohen took over.4 The company now cites more than 1,000 customer deployments.1
How it compares with Intruder and Aikido Security
Intruder scans internet-facing systems and cloud accounts and tells a team what to fix, but leaves the fixing to them. Aikido Security focuses on code, containers and cloud configuration for software teams. Vicarius works on the endpoints and servers an IT team manages and carries the job through to the patch, which makes it the closest of the three to a patch management tool.
Limits
Reviewers say the screens for launching patches are complicated, and one said vRx sends a download link for some updates, such as a Google link for Chrome. Prices beyond the AWS Marketplace listing are quoted.2 The founding CEO's departure in 2024 is recent, though the other two founders remain.4
What customers say
Quoted word for word from public reviews on PeerSpot, retrieved October 23, 2026. Each quote links to the review or post it comes from.
Where it helps
If you update the Windows OS, it says that it's up to date but after we check vRx, it says that there are more vulnerabilities.
It simply looks for apps that have got updates. It then updates them without user interaction. That saves time for us.
Where it falls short
The user interface for deploying patches can be improved, as it appears complicated when launching patches.
Currently, they just send a link to the software. For example, if I want to update Chrome, they send me a Google link to download the update.
Sources
- Vicarius, About, accessed October 23, 2026
- Vicarius, vRx pricing, accessed October 23, 2026
- AWS Marketplace, vRx consolidated vulnerability remediation, accessed October 23, 2026
- Vicarius vsociety, Important leadership announcement from Vicarius, 2024
- TechCrunch, Vicarius lands $30M for its AI-powered vulnerability detection tools, January 17, 2024
- TechCrunch, Vicarius raises $24M to build out its vulnerability remediation platform, February 9, 2022
