OX AI Native Application Protection Platform (AINAPP)

My main use case for Ox Security is that it is a very powerful and comprehensive tool that meets most best practices for web app security testing. Ox Security delivers comprehensive security testing and assessment capabilities, addressing the key requirements of a security-mature organization. Its intuitive dashboard provides a centralized and unified approach to issue management, ensuring streamlined tracking and resolution. A versatile set of plugins enables seamless integration with various ticketing systems for issue management as well as the import of findings from other security tools. The majority of these integrations are fairly simple to implement. A particularly valuable feature is the pipeline functionality, which allows the creation of customized workflows based on scan results, making prevention and notification processes highly adaptable. Additionally, Ox Security is backed by a well-structured and responsive support team, which ensures continuous availability and prompt handling of all inquiries and feedback.

The pipeline functionality of Ox Security has helped my team specifically by providing end-to-end security visibility, covering the entire development lifecycle from code writing and storage to security testing, deployment, and infrastructure management. With all the functionality integrated into a single, well-organized platform, issue management becomes seamless. The tool dynamically recalculates issue priorities based on insights gathered throughout the development and deployment process, ensuring context-aware risk assessment. Its powerful pipeline system enables automated notification to relevant teams based on issue origin and type while also enforcing security policies by blocking new code when prohibited issue types are detected.

Regarding my main use case, Ox Security also allows my DevSecOps team, myself, and my development team to concentrate our efforts on real issues instead of just ticking boxes.

Ox Security has positively impacted my organization by tackling the core challenge of ensuring a consistent and holistic approach to application security throughout the entire software lifecycle. Traditionally, my teams had to juggle disparate tools, analyze complicated vulnerability reports, and struggle to align security measures with fast-paced development timelines. Ox Security as an ASPM solution consolidates these efforts into a single, integrated platform. No more switching between multiple dashboards. No more guesswork on which vulnerabilities to fix first and no more miscommunication between development and security teams. I also love that the integrated end-to-end visibility dramatically enhances our efficiency. It also ensures that potential issues are flagged at the earliest stages, allowing the team to quickly address them before they compound into bigger problems. By simplifying our security workflows, Ox Security not only frees up valuable engineering time but also significantly reduces the risk of introducing critical vulnerabilities into production. The result is faster, more secure product releases, greater peace of mind, and the ability to maintain a stronger security posture as we continue to grow.

Since implementing Ox Security, it has helped us improve visibility into vulnerabilities and prioritize remediation more effectively. I estimate that it saves my team around 20% to 30% of the time spent on manual security reviews while helping us identify and address issues earlier in the development processes. It has also improved our overall application security and reduced the risk of vulnerabilities reaching production.

The best features that Ox Security offers include real-time visibility and actionable intelligence. Also, I love the intuitive interface and seamless integrations.

Regarding the features of Ox Security, I love the pipeline functionality, which allows the creation of customized workflows based on scan results, making prevention and notification processes highly adaptable. I also love the visibility it provides, which is end-to-end security visibility covering the entire development lifecycle from code writing and storage to security testing, deployment, and infrastructure management. I also love its powerful pipeline system, which enables us to automate notifications to relevant teams based on issue origin and type while also enforcing security policies by blocking new code when prohibited issue types are detected. The intuitive interface makes it easy to pinpoint vulnerabilities early, prioritize critical issues, and streamline remediation processes. The seamless integration with existing DevOps tools ensures that security insights flow naturally into development workflows without creating bottlenecks. I also love the real-time visibility and actionable intelligence. It fosters a security-first mindset, boosting both the confidence of my development team and the overall resilience of our applications.

Regarding Ox Security's AI capabilities, I find its governance and security capabilities to be very strong, particularly in helping us identify risks and maintaining visibility across the software development process. I also value the focus on data protection, access control, and responsible use of AI.

The AI capabilities are generally accurate and reliable, especially in helping us identify vulnerabilities and highlighting potential risks very easily. They help us reduce manual effort and speed up security reviews.

One area that Ox Security could improve is the dashboard customization and reporting.

Regarding what I would like to see improved with dashboard customization and reporting, it would be helpful to have more flexible reporting options and clearer insights into vulnerability trends. I would also like to see deeper integrations with development tools and more straightforward configurations to make daily security workflows even smoother.

I would also like to see more automation in vulnerability prioritization and remediation, with clear recommendations on which issues need immediate attention.

I have been using Ox Security for about four years.

Ox Security has been very stable and dependable in our environment because it provides consistent vulnerability monitoring and security visibility without major disruptions.

Ox Security scales well as our environment grows. It supports additional repositories, applications, and development teams without major performance issues. This makes it suitable for expanding security needs in our organization.

For me, the customer support has been generally good and very professional. The team has been very responsive, helpful, and able to provide guidance when we encountered configuration or integration issues. I would rate the customer support nine out of ten.

We previously used Snyk, that is S-N-Y-K, for application security and vulnerability scanning. We generally moved to Ox Security because we wanted better visibility across the software development lifecycle, more centralized risk prioritization, and a stronger ability to identify and address vulnerabilities earlier.

The deployment of Ox Security was relatively fair and straightforward. Ox Security integrated with our AWS environment, although the initial configuration and connecting all relevant repositories and security tools required some technical effort.

The configuration process was fairly smooth. Setting up integrations and adjusting security policies required some initial effort, but the platform was manageable overall.

Ox Security integrates reasonably with our AWS environment, providing useful visibility into security risks across our development workflows. The integration is helpful, although deeper native integration and more flexible configuration would make it even better.

I have seen a positive return on investment with Ox Security. It has helped us reduce manual security review time by approximately 20% to 30%, allowing our existing team to focus on other important tasks without adding extra staff. Earlier vulnerability detection has also reduced the effort required for remediation and improved overall security efficiency.

The procurement process was fairly straightforward, with no issues along the way. The product requirements and licensing options were clear enough to support our evaluation, although having more transparent pricing and flexible licensing options would make the budgeting and purchasing decision much easier.

The metering and billing process is generally manageable, but I would appreciate more transparency around usage calculations and licensing costs.

The pricing and licensing of Ox Security were reasonable for the security value the platform provides for us. Setup required some initial technical effort, but there were no major complications.

Before choosing Ox Security, I evaluated options like Mend.io and Checkmarx.

I would rate Ox Security a five out of five.

The reason why I rate it a five out of five is that it provides strong vulnerability detection, clear security visibility, and I also love the ability to prioritize risks before they reach production. What stood out most was how it helps my team work more efficiently and take a more proactive approach to application security.

For an organization looking to improve application security and also gain better visibility into vulnerabilities, I advise that you take time to configure the integrations properly and establish clear risk priorities from the beginning. It offers good value, especially for teams managing complex development environments.

I worked with Ox Security as a service provider, not as a representative, but as a user. I use it in my employee capacity, providing services to companies in Israel, and one of them is an insurance company where we use this product to improve its security posture.

Ox Security use cases include vulnerability management and understanding the company's security posture, as well as addressing the security state of our customer's cloud-native pipelines.

As a service provider, I believe the biggest advantage of Ox Security is its simplicity and the clarity of the issues, along with a very good dashboard showing the state of the company. I see degradation in critical issues and high issues over time when using the product for a prolonged period, so the dashboard is very inclusive and clear about the state of security.

Automated vulnerability management in Ox Security makes our security posture much better.

I'm not sure about flexibility because I didn't try it, so I can't comment on that, but as far as I understand, most of Ox Security is not personalized. I think that most of the tool is quite deterministic and cannot be personalized if you ask about customization.

Personalization and customization should be tackled as improvements that could be made.

Regarding missing features, I think that customization should be addressed, and it would also help if disputable issues could be shown rather than simply dismissing them or not displaying them at all.

I do not have extensive experience with Ox Security, as I started working with it approximately six months ago.

I would say Ox Security is about ninety-nine percent stable. We had some issues on one occasion where we saw a huge jump in the graph due to a bad deployment, but that happened just once in the past six months, so it is not representative.

Ox Security is highly scalable without limitations in this regard.

I find the customer service from Ox Security to be very helpful and attentive. If I had to rate the customer service from zero to ten, I would give it a ten.

As for return on investment, I don't know the pricing of the product, but based on what I understand from the customer, it seems quite honest. I work mostly on the technical side and the security posture rather than the pricing, so I won't be very conclusive regarding ROI itself.

Regarding threat detection capability, I think that Ox Security is not used for that matter. The CISO mainly focuses on dev sec ops rather than runtime security or real-time security.

I figure that the most important metrics for the analytics feature are the critical issues dashboard, which helps understand whether there is a leak of a secret or a very critical vulnerability that is not being used. Another important aspect is the integration with other products like JFrog and X-ray, which shows not all the findings but mostly focuses on what Ox Security considers the most important issues. For instance, we found some issues that were flagged by JFrog, but Ox Security dismissed them, leading to discussions about whether those issues are real, as there are often false positives in the security world, as well as considerations about the attack surface for each vulnerability and whether these are truly critical issues or not.

I work extensively with JFrog X-ray, which is my major tool for another customer. I believe that JFrog is more pinpointing, and I have some integration with JFrog with the build system, the CI/CD and X-ray vulnerabilities meter. It's quite useful, but I think that they serve different purposes; JFrog comes mostly from the artifact management side and less from security. Ox Security is mostly focused on the DevSecOps and areas that cannot be detected. In terms of vulnerability management, Ox Security has strong integration, but sometimes there are vulnerabilities that are disputed or dismissed, which creates an interesting intersection between the two products.

From what I talked about with the DevOps team, deployment is quite straightforward.

My overall review rating for Ox Security is zero.

My main use for Ox Security is having a centralized way of aggregating all of the vulnerabilities that I may encounter within different applications and different stages of the software life cycle we use, and to provide context to those vulnerabilities.

Ox Security helps me daily in my workflow since it raises vulnerabilities found in our repositories, in our generated images, and in our cloud environments. An example of usage would be the integration we have into our CI/CD pipelines to help us with SAST and SCA vulnerabilities along with other scanners.

We use Ox Security as a main hub for our vulnerabilities, in the same way that AWS Security Hub would behave.

The best features Ox Security offers in my experience are its ability to provide context to a vulnerability and determine if a vulnerability is likely to be exploited or not.

Ox Security delivers context through a mix of several things, including dashboards and its prioritization scoring system. Basically, if you have some configuration and your software is vulnerable to some kind of vulnerability, but that exact code doesn't execute the vulnerable code itself, it determines that the risk is unlikely to be exploited, for example.

Ox Security has positively impacted my organization by helping to reduce the amount of noise we received from vulnerabilities because of the prioritization scoring it has and all of the context it provides.

Regarding measurable outcomes, I would say that it has reduced the amount of noise by about forty percent. We didn't have that much noise before, so around a forty percent decrease in noise has helped us reduce the amount of hours we have to spend reviewing each vulnerability.

The main pain point I have with Ox Security as a tool is the user interface, which can feel quite complex when navigating large datasets. It's not as developer-focused as other tools.

More customization options for dashboards would be a nice to have regarding the needed improvements.

I have used Ox Security for about six months.

Ox Security is stable.

Regarding scalability, we didn't face any issue when deploying Ox Security in all of our clouds and repositories and CI/CD pipelines. I would say its scalability is good enough.

Customer support for Ox Security is generally good, but they may take a few days to answer sometimes.

I would rate the customer support a seven on a scale of one to ten.

Positive

We didn't use anything before Ox Security.

My experience with pricing, setup cost, and licensing was quite straightforward. Ox Security does not have a public pricing tier, and I had to contact them through sales, but they were really helpful with setting everything up and providing an amount.

I do not have a specific metric, but we have saved a lot of time while using Ox Security because our time to respond to vulnerabilities has decreased significantly and also because of the reduced noise received.

Before choosing Ox Security, we evaluated Aikido as well.

My advice to others looking into using Ox Security is that its strength relies on the aggregation of several tools. If a company is struggling with managing several tools just to get a better understanding of how their security posture is, tools like Ox Security are a must. I would rate this product an eight overall.