Trapezoid

Trapezoid, Inc. operates as a specialized cybersecurity firm providing integrity monitoring solutions for firmware and devices across enterprise environments. Founded in 2012 by Jose E. Gonzalez, Robert Rounsavall, and Michael Dyer, the company was established to address the critical security gap of 'vulnerabilities below the operating system' (VBOS). The firm's leadership carries significant experience; CEO Jose E. Gonzalez holds a law degree from Fordham University and has a background in corporate and business development roles at companies including Terremark, Blockbuster, and American Express, providing a strong foundation in legal, strategic, and technology infrastructure domains.

The company's core offering is the Trapezoid® Firmware Integrity Verification Engine (FIVE), a platform designed to give organizations visibility into the hardware and firmware layers of their IT, IoT, and Operational Technology (OT) systems. This enables the detection of unauthorized changes and compromises that traditional, operating-system-level security tools would typically miss. The FIVE platform functions by monitoring these deep system layers to identify indicators of compromise, helping clients improve operational hygiene, conduct incident response, secure the supply chain, and meet stringent compliance mandates from frameworks like NIST, FISMA, HIPAA, and PCI.

Trapezoid serves a diverse client base that includes government agencies, critical infrastructure operators, and corporations in the financial and healthcare sectors. The business generates revenue through its proprietary FIVE platform and leverages a national network of partners and authorized resellers to extend its market reach. The firm initially focused on securing cloud production environments but evolved its platform to ingest data from any device type after identifying a broader enterprise need for comprehensive firmware integrity verification. A seed funding round was completed in December 2013, with participation from investors such as Work-Bench, CoVant, and DigitalEraGroup.

Keywords: firmware security, device integrity monitoring, cybersecurity, vulnerabilities below the operating system, VBOS, IT/OT security, incident response, compliance, supply chain integrity, hardware security, NIST compliance, network security, critical infrastructure protection, Trapezoid FIVE, Jose E. Gonzalez, enterprise security, cloud infrastructure security, BIOS security, malware prevention, threat detection