Seamless and fast integration with your tools; a wide amount of features; user-friendly easy to use interface; great level of technical and non-technical support from the vendor. Review collected by and hosted on G2.com.

Few bugs over time and non-detailed/non-comprehensive documentation. Review collected by and hosted on G2.com.

Ox is a fantastic tool at the heart of our AppSec strategy. It’s easy to implement and provides an overwhelming volume of crucial, interrelated data that is vital to running a secure and effective SDLC.

The platform offers a wealth of features for use across your environment, gathering data from multiple stages of the SDLC and creating a top-down view to apply effective risk management strategies. Collected issues are contextually reassessed, and reprioritised severities help better organise and address findings efficiently.

We’ve integrated Ox scanning into our CI pipeline, enabling engineers to identify issues early in the development cycle—before code is merged—thanks to Ox’s pipeline rules. The variety of scans offered is impressive, accounting for numerous variables throughout the code journey.

Ox’s capabilities extend to our EKS clusters, validating image deployments and helping us better organize our registry. The data it provides on identified issues is invaluable for remediation planning, including the source of findings and associated code snippets. While the UI could be more intuitive and has a slight learning curve, it’s clear that all the necessary data is readily accessible within the platform. Administrators can also customise user views to hide irrelevant features, minimizing distractions for engineers.

The recent implementation of RBAC has further simplified our workflows, limiting users' visiblity scope and assigning the appropriate privileges. By dividing findings among the teams that own them and leveraging the application owner features, we can effectively delegate responsibilities and streamline remediation efforts.

Ox’s customer support has been excellent—attentive to our needs and super responsive to feedback. They convey professionalism and a genuine passion for their product and purpose, it shows.

Ox consistently delivers upgrades and new features, almost on a weekly basis. The new BOM capabilities, including Artifact BOM and Cloud BOM, provide unparalleled visibility into our cloud infrastructure and artifacts, helping us maintain control and avoid unvalidated components.

Overall, I highly recommend Ox Security. With their pace of innovation and commitment to excellence, I have no doubt they’ll be an industry leader in the coming years. Review collected by and hosted on G2.com.

It's worth mentioning that the Ox team are aware of these points and are currently working to have the features implemented to support them shortly.

Issue metrics - Whilst there's great clarity on the issues that are open, it is harder to track what's been closed and why.

Jira integration - This is being developed, but our experience has shown that there is room for optimisation here, the integration at this stage simply creates tickets, it does not have the ability to close or add updates to the tickets through the lifecycle of the vulnerability remediation.

RBAC - This has been implemented and is great, but still requires some work to be a little more dynamic Review collected by and hosted on G2.com.

We’ve been very satisfied with OX Security, especially their pricing model, which fits our needs well. The aggregation and deduplication features are excellent, saving us time and effort by streamlining vulnerability management. It integrates smoothly with the various tools we use, and their team provides outstanding support with fast responses over Slack and regular monthly meetings. We also appreciate being part of their beta features program and how open they are to hearing and acting on our feedback. Review collected by and hosted on G2.com.

The only downside is that the feature set isn’t fully complete yet, as the product is still evolving to fill gaps and add new functionalities. Review collected by and hosted on G2.com.

he platform’s real-time monitoring and integration with our cloud and identity management systems make it a versatile, all-in-one security solution. while Ox Security’s role-based access control ensures precise permissions for our team.

-Seamless integration with CI/CD pipelines and existing infrastructure

- Robust APSM SAST tool for in-depth code security

- Real-time monitoring and compliance support

-Responsive and knowledgeable support team Review collected by and hosted on G2.com.

Initial setup can be complex for new users

More customization in reporting would be a great addition Review collected by and hosted on G2.com.

We feel that the team isn’t just another supplier, they work with us as if they’re part of our own team

The UI is great, you can all the information in one place, also if you will integrate other systems you will see the events in one place, if you like details, you will have it, it is very easy to understad how to use it

Implementing integration, workflows and alert are very easy

The customer support is great, again, you will feel like it is part of your team

We use it daily, integrated with our communication system Review collected by and hosted on G2.com.

They are efficiently pushing new features to the platform at a fast pace, which enhances the platform’s functionality and keeps it up-to-date, we need to learn it and improve our proccess :) Review collected by and hosted on G2.com.

OX Security features an exceptionally intuitive user interface, making it the most user-friendly option among competitors. Its straightforward implementation delivers immediate value, enhancing overall security practices and efficiency. The product continues to evolve, OX collect our fead backs and showcasing valuable capabilities that meet the needs of our security teams.

Whenever our team identified bugs, the OX support team is responsive and quick to resolve issues. Review collected by and hosted on G2.com.

Limited executive Dashboard for reporting to higher management the progress of enhancing our product’s security posture over time. Review collected by and hosted on G2.com.

I'm a huge fan of the workflow checks, both in how easy they were in integating into our current solution and the data provided from the

I've found the UI intutive and straightforward to use, without having to consult the documentation or guides, I generally was able to find everything that I needed with very littl effort which helps when using the system for the first time.

Really pleased with how OX performs compared to its competitors in providing rapid, actionable data that development teams can action and improve our secuirty posture and often prevent issues from occuring. Review collected by and hosted on G2.com.

Nothing negative in my experience so far. Review collected by and hosted on G2.com.

Ox's ability to aggregate and consolidate findings from a variety of tools and provide the "real risk".

The integrations list is wide, and easy to work with the Ox team if a new connector is required Review collected by and hosted on G2.com.

The documentation is majorly lacking.

There are no clear instructions for setting up connectors, with majority of the connectors only providing the required steps in the "add a connector" window. The text box is very small, and the text size is tiny too.

There is also no documentation as to why certain permissions are required (e.g AWS)

The Ox UI can be very overwhelming, and the issues are "ugly" to look at Review collected by and hosted on G2.com.

Working with the onboarding team has been wonderful since they are also the developers of the tool they know the best way of using it. The team continuously takes feedback and is willing to set in to help introduce the tool to other developers in your organization. The tool is fairly easy to use, integrates with Jira, and provides plenty of information for developers to secure. Our team especially likes the reporting features since they make progress in App Sec readily visible. Review collected by and hosted on G2.com.

I wish there was more robust history with the comments. Review collected by and hosted on G2.com.

What I like best about OX Security is its proactive, continuous approach to application security. The platform's Active ASPM, powered by a robust AppSec Data Fabric, allows for seamless, real-time scanning across our application environment. This constant visibility into potential security risks, combined with consolidated data from multiple security tools, provides a streamlined and unified security posture. The platform’s intuitive interface also makes it easy to understand insights and take immediate action, enhancing both productivity and security across the team.

OX Security has a Great Customer support expierince,

And FR are being implemnted preety fast. Review collected by and hosted on G2.com.

I didn't realy any downside using OX Security,

But then again we are working with them for just a few months... Review collected by and hosted on G2.com.