OX Security

Prompt-to-runtime AppSec that tries to show only the 5 percent of findings that can actually breach you.

Proof of life. Raised $60M Series B led by DTCP, taking total funding to $94M, May 2025

OX unifies SAST, SCA, secrets, ASPM, and cloud runtime so a finding is always tied back to a line of code. Prioritization uses reachability and exploitability rather than raw CVE counts, which is the pitch against Checkmarx-and-Snyk noise. VibeSec and an agentic pentester extend that into AI-written code and live attack surface. Founded by former Check Point security leads.

Category: Application security
Headquarters: New York, USA
Country: USA
Founded: 2021
Funding stage: Series B
Total funding: $94M
Website: https://www.ox.security

Investors

DTCPTeam8IBM VenturesMicrosoft