Minimus Acquired by Echo in Container Security Deal

Echo has acquired Minimus, a provider of secure, minimal container images, for an undisclosed amount. The deal brings the container security startup, founded by the team behind Twistlock, under Echo’s corporate umbrella, marking a consolidation in the infrastructure software space.

Minimus specializes in stripping container images down to their essential components, eliminating bloated base layers and unnecessary packages. The company’s core product offers images with 97% fewer vulnerabilities compared to standard alternatives, alongside FIPS-ready security and built-in Software Bill of Materials (SBOM) integration. This approach is designed to reduce the attack surface for development teams, particularly those working toward FedRAMP and NIST compliance. Echo, for its part, operates in the broader software infrastructure market, providing tools and platforms that support enterprise application deployment and management.

The acquisition is strategic for Echo as it seeks to deepen its security capabilities within the container lifecycle. By integrating Minimus’s technology, Echo can offer its existing customer base a more hardened foundation for running workloads in production. The move also gives Echo access to a specialized engineering team with a proven track record in security, given their prior experience at Twistlock, a company known for its container security platform. For Minimus, joining Echo provides a larger distribution network and the operational resources needed to scale its product beyond its current niche.

The combined entity is expected to focus on delivering a more streamlined path from development to compliant deployment. Echo will likely weave Minimus’s image technology into its existing offerings, allowing enterprises to adopt smaller, more secure base images without overhauling their current workflows. The integration of SBOM generation directly into the image build process could also become a standard feature for Echo’s platform, simplifying audit trails for regulated industries. As the demand for supply chain security grows, the acquisition positions Echo to address a critical pain point for teams balancing speed with strict compliance requirements.