OX Security Secures $60M to Target the Critical 5% of AppSec Risks in the AI-Driven Coding Era

Accelerating Development and Rising Security Challenges

The emergence of vibe coding, characterized by AI-assisted creativity and rapid code generation, has enabled developers to deliver software faster than ever. However, this surge in productivity comes with an increased security debt. OX Security has raised $60 million in a Series B funding round to address the challenge of distinguishing critical security risks from noise in application security. This round, led by DTCP with participation from major investors including IBM Ventures and Microsoft, boosts OX's total funding to $94 million.

The New Reality of AI-Generated Code

Generative AI tools are introducing a flood of clean-looking but potentially vulnerable code into codebases. Traditional engineering practices also contribute risks. Existing Application Security (AppSec) tools often fail to scale accordingly, producing excessive alerts with limited relevance. This overload causes developer fatigue and overlooked vulnerabilities that may lead to severe security breaches.

OX Security’s Innovative Approach

Neatsun Ziv, CEO and Co-founder of OX Security, explains that their platform pioneers agentic code review powered by AI combined with critical thinking modules that simulate top security engineers’ judgment. This enables continuous risk modeling across both AI- and human-generated code, identifying and prioritizing vulnerabilities that truly matter.

Focusing on the Most Exploitable Risks

OX Security emphasizes precision by targeting the 5% of vulnerabilities that are exploitable, reachable, and impactful, rather than addressing every theoretical flaw. Their platform’s Application Security Posture Management (ASPM) engine integrates static and dynamic analysis, software composition, CI/CD pipelines, cloud infrastructure, and runtime data to create a meaningful risk profile.

Seamless Integration and Developer-Friendly Insights

The AI-driven prioritization engine connects with over 100 developer and security tools and can be deployed quickly within existing workflows. OX delivers code-to-cloud traceability, translating complex security issues into developer-friendly language and providing guided remediation recommendations. Their unified dashboard centralizes vulnerabilities and risk assessments, reducing mean time to remediation from weeks to days.

Tackling Alert Fatigue and Context Deficiency

Modern enterprises rely on a complex array of security tools, leading to overwhelming alert volumes without unified prioritization. This causes delays in fixing critical issues. OX Security’s platform cuts through this noise by clearly identifying which vulnerabilities pose real breach risks and what needs immediate attention.

Responding to an Urgent Market Need

With code generation accelerating due to GenAI and threat actors weaponizing vulnerabilities faster than ever, OX Security addresses the growing attack surface with limited security resources. Founded by veterans from Check Point in 2021, OX was inspired by incidents like the SolarWinds supply chain attack to build a platform that genuinely reduces risk.

Trusted by Industry Leaders

Over 200 organizations across various sectors including Microsoft, IBM, and SoFi trust OX Security. Clients praise its ease of integration, superior support, and tangible improvements in security posture, including end-to-end traceability, faster triage, automated remediation, and increased confidence in code security.

Future Outlook

The new funding will support deeper toolchain integration, more precise risk modeling, enhanced visibility throughout the software development lifecycle, greater automation, and global market expansion. OX Security aims to lead the transformation to unified, AI-driven application security as AI coding practices become standard.

A New Paradigm for Application Security

OX Security’s approach shifts the focus from detecting all vulnerabilities to understanding and prioritizing the ones that present real threats. For developers and security teams in the AI era, OX offers clarity and focus on the critical 5% of AppSec risks.

"Let’s stop chasing noise," says Ziv. "And focus on the 5% that matters."