Flamingo Raises $4.5M Seed Round · Led by Vertex Ventures, bringing total funding to $6.7M to build the open, AI-native layer for IT and security.
Security, privacy and AI governance.
Frameworks we are audited against, and what is next.
An independent audit confirming a company keeps customer data secure, available, and private.
The U.S. government's widely used framework for identifying, preventing, and recovering from cyber threats.
The U.S. Department of Defense's cybersecurity standard for contractors that handle defense information.
Security controls currently passing in continuous monitoring (via Vanta).
5 passing controls in Identification & authentication
System access restricted to authorized access only
The company restricts privileged access to databases to authorized users with a business need.
The company restricts privileged access to the production network to authorized users with a business need.
The company's production systems can only be remotely accessed by authorized employees via an approved encrypted connection.
The company requires authentication to the "production network" to use unique usernames and passwords or authorized Secure Socket Shell (SSH) keys.
Public documents open directly. Gated documents are shared under NDA after one short request.
Public
Third parties that process customer data on our behalf.
Cloud provider
Identity provider
Security
Underlying LLM Model
Underlying LLM Model
Underlying LLM Model
How customer data is handled by the AI in our products.
OpenFrame ships a completed AI Guardrails system enforcing safety policies, prompt-injection protection, output validation, action-impact assessment, and rate limiting on sensitive operations with human-in-the-loop controls for high-impact changes.
No. Customer data submitted to our AI features is used only to service that customer's own requests. It is not used to train underlying models or shared across tenants.
Yes. Every AI action is recorded in the activity logs, which capture the status, tool used, source, and full details of each execution, including a direct link to the specific device the action ran on. Logs are searchable and filterable by status, tool, and source, so you can trace exactly what the AI did, when, and why, whether you're verifying an automated fix, confirming a script ran as intended, or investigating an unexpected change.
No. Every AI interaction is scoped to your individual environment. Fae and Mingo only ever access the data belonging to your organization. There is no cross-customer data access at any layer, including AI.
Yes. Both Fae and Mingo will always ask for approval before making any changes to a device. They can gather information and propose a fix, but nothing is executed without a technician (or user, depending on your guardrail settings) confirming it first. This is enforced by design, not left to the AI's discretion.
Customers and prospective customers can reach our security team for questionnaires, documentation or a review call.
All our code will be open-source. No hidden features, no vendor lock-in, no surprises.
Every feature developed with real MSP feedback. Your needs drive our roadmap.
From development to deployment, we document everything. Full transparency in how we build.
We create our own secure versions of OSS projects with enforced security practices for coding and authentication.
Backed by serious investors as a commercial company committed to long-term support and development.
SOC 2 Type II compliance coming soon. Enterprise-grade security standards.
Expensive vendor licensing eating profits
Closed-source tools hiding functionality
Complex integrations requiring custom work
Limited control over critical infrastructure
More eyes is better. Community catches flaws faster.
Zero backdoors possible when code is public
3x fewer zero-day exploits vs proprietary software
Immediate fixes vs hidden vulnerabilities
78% of enterprise containers run on Kubernetes (OSS)
66% of web traffic secured by OpenSSL (OSS)
Microsoft uses open source in their own security tools
$1 trillion+ daily transactions trust open source encryption
Small networks can detect intrusion without a security operations center. This guide covers the signals on the wire and on the host, IDS vs IPS vs EDR vs SIEM in plain words, the open-source tools that fit, where the sensor plugs in, and the tuning that keeps alerts worth reading.
A roundup of backup software for Windows endpoints and servers: image vs file backup, what Windows already includes, how Veeam Agent, Acronis, Macrium Reflect X, MSP360, Iperius, UrBackup and Duplicati differ, and how to choose and test one.
What the ELK stack is (Elasticsearch, Logstash, Kibana and Beats), how the pieces fit, the license history from 2021 to 2024, what self-hosting it costs a small IT team, and when OpenSearch or Grafana Loki fits better.
What virtualization is and how a hypervisor splits one server into many VMs, type 1 vs type 2 hypervisors, VMs vs containers, the Broadcom VMware licensing changes, and how to pick a hypervisor in 2026.
We checked the pricing page of all 15 major data loss prevention vendors. Three publish a price. Here is what DLP costs, what actually leaks in 2026, and how to cut fifteen options down to two before you take a sales call.
Perfect for MSPs who want full control and zero vendor lock-in.
Still deciding?
Ask Mingo answers from our docs and customer stories.
