Atomist

About Atomist

Atomist, founded in 2015 and headquartered in San Francisco, operates as a development automation platform focused on improving developer productivity and bolstering security within cloud-native application environments. The company was established by a team with deep roots in enterprise software: Rod Johnson, Christian Dupuis, Ryan Day, and James Roy Clark. Rod Johnson, who served as CEO until 2022, is a prominent figure in the Java community, renowned for creating the influential Spring Framework and co-founding SpringSource, which was acquired by VMware in 2009. This background in simplifying complex enterprise development directly influenced Atomist's mission to automate cumbersome developer tasks.

The firm's core offering is a DevSecOps tool that helps engineering and security teams manage and remediate vulnerabilities without impeding the software delivery pipeline. It addresses the common problem of traditional scanning tools that inundate developers with unactionable alerts. Atomist's platform provides a more focused approach to security by integrating directly into the development workflow. Originally, the platform was conceived as a broader 'Software Delivery Machine' (SDM) to automate tasks across the entire development lifecycle, from project creation and code reviews to managing dependencies across multiple microservices. This was built upon an event-driven architecture and a GraphQL API that modeled the connections between code, teams, and tools, allowing for flexible and customizable automations.

Atomist's business model was based on a subscription service for its platform. On November 15, 2017, the company secured a significant milestone with a $22 million Series A funding round led by Accel and Matrix Partners. This investment fueled its product development and market expansion efforts. In a strategic move on June 21, 2022, Atomist was acquired by Docker. Following the acquisition, Atomist's technology was set to be integrated into Docker's product suite to enhance its secure software supply chain capabilities, particularly in vulnerability reporting and remediation for container images.