OX Security Features

Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.

Provides the ability to extend the platform to include additional features and functionalities

Application Programming Interface Specification for how the application communicates with other software. APIs typically enable integration of data, logic, objects, etc. with other software applications.

Provides the ability to extend the platform to include additional features and functionalities

Provides risk scoring for suspicious activity, vulnerabilities, and other threats.

Provides tools for managing authentication credentials such as keys and passwords.

Analyzes data associated with security configurations and infrastructure to provide vulnerability insights and best practices.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Collect and maintain structured information that describes data or content

Create, manage, and track policies and procedures within an organization

Manage and track all disruptions and incidents

Detect (and block) vulnerabilities and threats in your applications based on vulnerability information

Track and manage adherence to policies for any service, product, process, or supplier

Manage user accounts, profiles, roles, permissions, and other details across applications, devices or networks

Manage the processes involved when making the application ready for use

Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws

Install software updates and bug fixes remotely

Identify and respond to security threats to developed applications

Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.

Analyze and gain insights into data in real-time

Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.

Examines application source code for security flaws without executing it.

Scans application source code for security flaws without executing it.

An application for source code editing, compiling, and debugging

Tools to visualize and analyze data.

Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.

Examines application source code for security flaws without executing it.

Scans applications and networks for known vulnerabilities, holes and exploits.

Scans application source code for security flaws without executing it.

Allows users to access a terminal host system and input command sequences.

Allows users to perfrom hands-on live simulations and penetration tests.

Runs pre-scripted security tests without requiring manual work.

Allows users to test applications for specific compliance requirements.

Scan the initial code written for application development

The rate at which scans accurately detect all vulnerabilities associated with the target.

The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.

Scan for security vulnerabilities in multiple coding languages

Allows users to perfrom hands-on live simulations and penetration tests.

Runs pre-scripted security tests without requiring manual work.

Allows users to test applications for specific compliance requirements.

Scans functional applications externally for vulnerabilities like SQL injection or XSS.

The rate at which scans accurately detect all vulnerabilities associated with the target.

The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.

Provides image verification features to establish container approval requirements and continuously monitor for policy violations to identify containers with known vulnerabilities, malware, and other threats.

Constantly monitors acivity related to user behavior and compares activity to benchmarked patterns and fraud indicators.

Generate insights across IT systems utilizing event metrics, logging, traces, and metadata.

Conduct tracking and assessment of application and device behavior without breaks or interruptions

Active monitoring of systems, applications, or networks

Scans application and image source code for security flaws without executing it in a live environment

Monitors container activities and detects threats across containers, networks, and cloud service providers.

Protects compute resources across a networks and cloud service providers. Serves as Firewall and prompts additional authentication for suspicious users.

Allows administrative control over network components, mapping, and segmentation.

Scans pods/images deployed to production for vulnerabilities or compliance issues

Discover patch statuses and vulnerabilities

Track issues as vulnerabilities are discovered. Documents activity throughout the resolution process.

The rate at which scans accurately detect all vulnerabilities associated with the target.

The rate at which scans falsely indicate detection of a vulnerability when no vulnerabilitiy legitimately exists.

Runs pre-scripted vulnerability scans without requiring manual work.

Automatically identify and flag unusual behaviors and malicious software

Allows users to scan applications and networks for specific compliance requirements.

Analyzes network devices, servers and operating systems for vulnerabilities.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Discover patch statuses and vulnerabilities

Scan the initial code written for application development

Allows users to perfrom hands-on live simulations and penetration tests.

Scans application source code for security flaws without executing it.

Scans functional applications externally for vulnerabilities like SQL injection or XSS.

Analyze potential risks across the organization

Supports a useful and wide variety of programming languages.

Integrates seamlessly with the build environment and development tools like repositories, package managers, etc.

Grants comprehensive user-friendly insight into all open source components.

Provides relevant and helpful suggestions for vulnerability remediation upon detection.

Monitors open source components proactively and continuously.

Comprehensively identifies all open source version updates, vulnerabilities, and compliance issues.

Provides thorough, actionable feedback regarding security vulnerabilities, or allows collaborators to do the same.

Prioritizes detected vulnerabilities by potential risk, or allows collaborators to do the same.

Provides suggestions for remediating vulnerable code, or allows collaborators to do the same.

Does not falsely indicate vulnerable code when no vulnerabilitiy legitimately exists.

Allows users to set custom code standards to meet specific compliances.

Detects vulnerabilities at a rate suitable to maintain security, or allows collaborators to do the same.

Ability to detect any attempts to tamper with the software during the development or deployment stages

Scans for malicious code

Verifies authenticity of third-party components

Tracks potential security risks

Offers data loss prevention tools to protect data from leaving the environments it is allowed to.

Monitors configuration rule sets and policy enforcement measures and document changes to maintain compliance.

Allows users to track and control security policies across cloud services and providers.

Provides a risk-based approach to determining trust within the network.

Application Programming Interface - Specification for how the application communicates with other software. API's typically enable integration of data, logic, objects, etc. with other software applications.

Provides all-encompassing display and analysis of environments, resources, traffic, and activity across networks.

Detect new assets as they enter a cloud environments and networks to add to asset inventory.

Facilitates the proactive search for emerging threats as they target servers, endpoints, and networks.

Analyzes your existing cloud, network, and IT infrastructure to outline access points that can be easily compromised.

Stores information related to new and common vulnerabilities and how to resolve them once incidents occur.

Allows for vulnerability ranking by customized risk and threat priorities.

Offers a software bill of materials to keep track of components

Tracks audit trails

Provides automated and continuous monitoring of various components

Identifies, tracks, and remediates vulnerabilities

Assesses and prioritizes risks based on application context

Ensures compliance with industry standards and regulations

Ensures mechanisms are in place for enforcing security policies across applications

Integrates with existing development and DevOps tools

Automates security tasks to improve efficiency

Includes tools for analyzing trends in security incidents and vulnerabilities over time

Assigns scores to vulnerabilities based on their potential impact, helping prioritize remediation efforts

Provides customizable dashboards that present real-time data on vulnerabilities, risks, and compliance status

Supports relevant SBOM formats such as cycloneDX and SPDX.

Provides robust, industry standard SBOM annotation functionality.

Generates thorough evidence of compliance including component relationships, licenses, and more.

Automatically and continuously monitors components to alert users of noncompliant elements.

Presents a transparent and easy to use dashboard for performing SBOM management.

Includes controls for role-based access permissions.

Capability to perform complex tasks without constant human input

Anticipates needs and offers suggestions without prompting

Capability to perform complex tasks without constant human input

Capability to perform complex tasks without constant human input

Ability to break down and plan multi-step processes

Provides specific capability to defend AI assets from adversarial attacks (including prompt injection, data poisoning, model inversion or extraction) without requiring retraining of the underlying model.

Enables automatic inspection of model inputs (prompts) and/or outputs (responses) to prevent unsafe, sensitive or manipulated content.

Monitors the integrity of model weights, dependencies or metadata (for example via SBOM/AIBOM) to detect tampering, drift or unauthorised modification.

Verifies the ability to enforce who or what (users, agents, systems) may access a model or LLM asset.

Detects unusual or harmful runtime behaviour of AI models, agents or workflows (such as unexpected output patterns, excessive permissions use, or unknown agents).

Provides a persistent, searchable audit log of AI‑asset inputs, outputs and interactions (including who/what invoked the model, when, and with what data) for forensics and compliance.

Ensures that the AI‑security platform supports scaling of AI‑asset protection (models, agents, multi‑cloud deployments) and applies governance/compliance frameworks as AI usage grows.

Enables integration of the AI‑security solution with traditional security stacks (SIEM, SOAR, cloud security, application security, identity/access management) to unify visibility and response.

Offers visibility into unmanaged or unauthorized AI/agent use (“shadow AI”) across the organisation and enforces control over such usage (e.g., agent creation, LLM‑based services).

Supports codified, machine‑enforceable security policies targeting AI models/agents (for example, blocking certain categories of prompts, enforcing least‑privilege for model use, enforcing “no external data” rules).

Automatically remediates or suggests remediation that meets internal and external code security best practices.

Automatically detects all security flaws in code as it's being written.

Does not flag false positives.

Integrates with existing security tools to fully contextualize remediation suggestions.

Seamlessly integrates into developers' existing workflows and environments to provide code security assistance.

Considers the entire codebase to detect existing and emerging security flaws.

Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access

Compliant with HIPAA, which sets standards for sensitive patient data protection

Application programming interface that allows for integration with other systems/databases

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Protect users working remotely and provide secure environments for personal devices to access company programs

Schedule predetermined or ad hoc maintenance services and labor requests

Set up connections to third-party platforms to improve business processes

Systematic evaluation of the security of a company's overall security system and situation

Identify and respond to security threats to developed applications

Convert data into a code for security

Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources

Active reporting of data and metrics

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

View and track pertinent metrics to find patterns and gain insights from data

Verify the identity of users/devices to enable secure access

Prevents, detects and removes malware

Securely stores data to prevent data loss or breaches

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Extend virtual private network over public networks to enable protected information exchange

A record of all activities within the system, including user access, changes made, etc.

Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox

Define levels of authorization for access to specific files or systems

Graphical representation of data

System alerts about the need to escalate an issue or request

Protect sensitive data for digital privacy

Continuously vetting activities within the container application environment including hosts, open ports, protocols and payloads.

Information to prevent, understand and identify cyber threats

Safeguards to protect network vulnerabilities

Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges

Classify levels of threat and organize actions based on priorities

Use AI to generate content in the form of text, images, videos, etc.

Protect against code driven website security attack techniques

Analyze and gain insights into data in real-time

Protect incoming and outgoing communications against malware, spam, display spoofing, and other threats

Identify and respond to security threats to web applications

Protect passwords from security threats

Crawling and indexing web pages

The process of identifying, quantifying, and prioritizing the vulnerabilities in a system.

Extra layer of security that requires not only a password and username but also something specific to that user

Set up connections to third-party platforms to improve business processes

Identify and alert about security breaches by third parties

A process to automatically integrate code changes from multiple contributors into a shared repository

Alter the layout and content of reports

Process of building and deploying software from the build to the production environment

Dashboard to view the status of ongoing processes, identify current incidents and track past activities

Uncovers vulnerabilities of the system and determines whether system data and resources are protected from possible intruders

A record of all activities within the system, including user access, changes made, etc.

Notifying as a warning or reminder of a potential or imminent hazard

Define levels of authorization for access to specific files or systems

Application programming interface that allows for integration with other systems/databases

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

A process to automatically release code changes from repository to production environment

Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm

Collection, analysis, and representation of numerical data and generation of reports to understand various patterns

Verify the identity of users/devices to enable secure access

Convert data into a code for security

Information to prevent, understand and identify cyber threats

Analyze potential risks across the organization

For development, security, and operations teams

Use AI to generate content in the form of text, images, videos, etc.

View and track pertinent metrics to find patterns and gain insights from data

Isolating applications from their host and from each other to protect against vulnerabilities

Initiate collection and analysis of known risks

Search and filter data across systems to locate required information by entering keywords or certain criteria

Classify levels of threat and organize actions based on priorities

Detect and remove errors

Use AI to generate content in the form of text, images, videos, etc.

A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users

For the intention to be used by developers

Manage the processes involved when making the application ready for use

Identify and respond to security threats to developed applications

Assembly of graphs and charts for visualizing and tracking statistics/metrics