OX Security
7.4#3 in software supply chain security softwareFree planFree planWebAPIExtensionLinux
Visit
| Fact | OX Security | Strobes ASPM |
|---|---|---|
| API | The public API retrieves applications, artifacts, issues, severity factors, and attack-path graphs, and supports policy and workflow integrations. | The developer platform exposes GraphQL at /api/graphql/ for querying and mutating assets, findings, engagements and assessments. |
| Company legal name | The vendor identifies itself legally as OX Appsec Security Ltd. and affiliates. | The company-data profile identifies the legal name as Strobes Security, Inc. |
| Deployment | OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup. | The platform page says Strobes is available as cloud SaaS or private deployment. |
| Documentation | The help center covers onboarding, scanners, integrations, policies, remediation, runtime sensors, multiple BOM types, workflows, reporting, administration, and API documentation. | The help center lists 45 exposure-management articles, 39 integration articles, 34 agentic-pentesting articles and sections for dashboards, workflows and administration. |
| Funding | OX announced a $60 million Series B in May 2025, bringing total disclosed funding to $94 million. | BounceWatch records four rounds totaling $780,000, including a $400,000 seed round from Chitra Holdings Inc. on March 5, 2022. |
| Headquarters | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. | Plano, Texas, United States |
| Integrations | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. | The integrations catalog advertises more than 100 connectors spanning scanners, cloud security, containers, ticketing and development tools. |
| Notable news | OX announced its Active ASPM platform on January 31, 2024, combining native scanners, contextual prioritization, attack-path analysis, and automated workflows. | Strobes’ press page records a 2022 SOC 2 Type 1 compliance achievement and a 2022 growth-capital announcement involving SucSEED Indovation Fund. |
| Prioritization | OX correlates findings with exploitability, reachability, business impact, and application context to reduce duplicated or low-value alerts. | Its risk scoring uses exploit likelihood, asset criticality, and compensating controls, with EPSS and KEV included in the displayed risk context. |
OX Security is aimed at enterprise teams securing applications, cloud environments, and AI-assisted development workflows. Teams should review the available deployment options and developer-based pricing metric when considering it.
Strobes ASPM may suit security teams that need to consolidate findings from multiple AppSec tools and prioritize remediation. Its listed customer range includes mid-market teams and large organizations with complex, high-volume environments.