- Home
- Application Security Orchestration Platforms
- OX Security
OX Security
LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location.
What it is
OX Security is an application security platform for organizations that want protection across software development and runtime, including AI editors and IDEs. OX Code covers SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes AIDR, agentic attack-surface analysis, runtime security, cloud posture tools, inventory and attack-path mapping. VibeSec uses organization-specific context to address insecure code and risky choices in AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments, proof-of-concept exploitation and OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and Splunk. It is available across web, desktop, Linux, API and extension environments, with hybrid and on-prem deployment options. Pricing is available on request and is based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.
For and against
For
- Covers code, cloud, and runtime security.
- Lists more than 150 third-party integrations.
- Offers hybrid and on-prem deployment options.
- IDE extension supports VS Code and compatible environments.
Against
- Pricing is available on request.
- OX CLI is marked Early Access.
The verdict
OX Security brings several application and cloud security capabilities into one platform, with broad integrations and deployment choices. Teams should weigh its developer-based licensing and request pricing before deciding whether it fits their needs.
Who it suits
OX Security suits organizations seeking application and cloud security coverage across development and runtime, including teams using AI coding tools. Its developer-based pricing model and deployment options may also fit teams needing on-premises or hybrid deployment.
Plans and prices
Free services
Up to 9 developer contributions · open-source projects may qualify with fair-use activation
Read 15 Oct 2026 · ox.security
OX Platform
150+ integrations · SSO and auto-provisioning · API/MCP support · on-premises option
Read 15 Oct 2026 · ox.security
OX Agentic Pentester
White-box web-app testing · Continuous pentesting · API assessment · Proof-of-concept exploits
Read 30 Sep 2026 · ox.security
OX Cloud
AIDR · Runtime security · CSPM · KSPM
Read 30 Sep 2026 · ox.security
OX Code
SAST · SCA · Secrets/PII · SBOM
Read 30 Sep 2026 · ox.security
OX VibeSec
Agent guidelines · MCP governance · Dependency vetting · Agent activity auditing
Read 30 Sep 2026 · ox.security
On the record
- Agentic Pentester
- The Agentic Pentester performs continuous AI-driven white-box web and API penetration testing, produces proof-of-concept exploits, maps findings to OWASP frameworks, and supplies remediation reports.ox.security · read 15 Oct 2026
- Agentic pentesting
- OX Agentic Pentester performs autonomous AI-driven pentesting, API security assessment, proof-of-concept exploitation and OWASP framework mapping.ox.security · read 30 Sep 2026
- API
- The public API retrieves applications, artifacts, issues, severity factors, and attack-path graphs, and supports policy and workflow integrations.docs.ox.security · read 15 Oct 2026
- API limits
- The documented API allowance is 1,000 requests per hour and 15,000 requests per day.docs.ox.security · read 15 Oct 2026
- Automated remediation
- No-code workflows can send Slack messages, open Jira tickets, create pull requests, change severity, and enforce pipeline blocks.ox.security · read 15 Oct 2026
- CLI
- OX documents a command-line scanner with pre-commit and pre-push Git hooks; the CLI scans only modified files and requires Node.js, npm, and Git.docs.ox.security · read 15 Oct 2026
- Cloud security
- OX Cloud provides AIDR, agentic attack-surface analysis, runtime security, CSPM, KSPM, DSPM, cloud inventory and attack-path mapping.ox.security · read 30 Sep 2026
- Code security
- OX Code covers SAST, SCA, secrets/PII, SBOM, IaC, CI/CD, Git posture, container scanning, malicious dependencies and API discovery.ox.security · read 30 Sep 2026
- Company legal name
- The vendor identifies itself legally as OX Appsec Security Ltd. and affiliates.ox.security · read 15 Oct 2026
- Company size
- LinkedIn lists the company size as 51–200 employees and displays 212 employees discoverable on the platform.linkedin.com · read 15 Oct 2026
- Compliance
- OX states that SOC 2 Type II is available upon request and that it is GDPR compliant and ISO 27001:2022 certified.ox.security · read 30 Sep 2026
- Data controls
- The Trust Center lists AWS compute hosted in the EU, MongoDB EU with data-at-rest encryption, Auth0 EU, Datadog EU and Azure OpenAI in the US for limited AI features.ox.security · read 30 Sep 2026
- Deployment
- OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup.ox.security · read 30 Sep 2026
- Deployment options
- The platform lists on-prem deployment, enterprise-grade support, MCP and API support, SSO and automatic provisioning.ox.security · read 30 Sep 2026
- Developer tools
- OX CLI scans modified local repository files and supports Open Source Security, Code Security, SBOM, IaC and Secret/PII categories; the documentation marks it Early Access.docs.ox.security · read 30 Sep 2026
- Documentation
- The help center covers onboarding, scanners, integrations, policies, remediation, runtime sensors, multiple BOM types, workflows, reporting, administration, and API documentation.docs.ox.security · read 15 Oct 2026
- Extension requirements
- The IDE extension requires Visual Studio Code 1.96 or newer, the VS Code Git extension, and an OX account with API access.marketplace.visualstudio.com · read 15 Oct 2026
- Funding
- OX announced a $60 million Series B in May 2025, bringing total disclosed funding to $94 million.prnewswire.com · read 15 Oct 2026
