Company profile
OX Security
AI-native AppSec from prompt to runtime: ASPM/PBOM, VibeSec for AI-generated code, plus OX Cloud CNAPP with AIDR and Agentic Attack Surface Management for AI agents/MCP.
- Status
- PrivateResearch map: Private
- Valuation
- Undisclosed
- Latest funding
- Undisclosed
- HQ
- Tel Aviv / Israel (Startup Radar)
- Website
- ox.security
- Last updated
Categories
Research map Vulnerability Management Up-and-comerResearch map Cloud Security Up-and-comerResearch map AI Agent Security Up-and-comerResearch map Runtime CNAPP Up-and-comerStartup Radar Application Security Pulse: HotStartup Radar Cloud Security Pulse: HotStartup Radar AI Security What's The Use tag
Funding & valuation
Funding: Undisclosed — no round recorded in the CyberMerge Funding Tracker.
Research map notes
- Research map · Vulnerability Management · Undisclosed Series B $60M (May 2025, DTCP) — total ~$94M; valuation Undisclosed. OX Cloud GA Sep 16, 2026. Source (recorded Oct 1, 2026)
- Research map · Cloud Security · Undisclosed Series B $60M (May 2025, DTCP) — total ~$94M; valuation Undisclosed. OX Cloud GA Sep 16, 2026 (PR Newswire). Source (recorded Oct 1, 2026)
Latest signals
- Startup Radar · Application Security · snapshot Oct 1, 2026 16 Sep 2026: OX Cloud GA — CNAPP + AI Detection and Response (AIDR) + Agentic Attack Surface Management (AASM) for agents/models/MCP (PR Newswire). Prior: 7 May 2025 $60M Series B (DTCP); total $94M. Source
- Startup Radar · Cloud Security · snapshot Sep 23, 2026 16 Sep 2026: OX Cloud generally available for new and existing customers (PR Newswire). Still private AppSec/CNAPP vendor; prior $60M Series B May 2025 (total $94M). Source
Competitors
Same-category peers from CyberMerge Research maps, Startup Radar and What's The Use tags.
- UpwindPrivateRuntime-first CNAPP: eBPF sensors for CSPM, CWPP, CDR, and AI-workload protection; expanding via Upwind AI…
- Palo Alto NetworksPublic · PANWEnterprise security platform spanning NGFW, SASE, CNAPP, and Cortex SOC analytics.
- MicrosoftPublic · MSFTIdentity, endpoint, cloud, email, and SOC tooling integrated across Microsoft 365 and Azure.
- ArmadinPrivateAI-native offensive security: autonomous agent swarms chain low-severity weaknesses into validated kill…
- Sweet SecurityPrivateRuntime CNAPP via a single eBPF sensor: CDR, CSPM, CWPP, CIEM, ITDR, API, and AI lifecycle.
- Aqua SecurityPrivateKubernetes-native CNAPP: Trivy/Tracee OSS, image/admission, CWPP, CSPM, KSPM, and supply chain.
- SysdigPrivateRuntime-rooted CNAPP built on Falco; container forensics, KSPM, and CDR (Sysdig Sage agentic analyst).
- Orca SecurityPrivateAgentless CNAPP (SideScanning) across posture, workloads, identities, data, Kubernetes, and AI.
- Oligo SecurityPrivateRuntime exploit blocking / virtual patching for cloud-native and agentic/LLM apps.
- CrowdStrikePublic · CRWDCloud-native endpoint and identity security with managed hunting and XDR.
- GooglePublic · GOOGLGoogle Cloud security: Chronicle/SecOps, Mandiant, Chrome Enterprise, and Wiz CNAPP (acquired) for agentless…
- ZafranPrivateExposure management plus Exposure Gateway as a control plane for AI agents.
Figures appear only as recorded in CyberMerge data, with source and date. “Undisclosed” means no published figure in our data. Editorial, not investment advice. Last updated . Spot an error? Tell the desk.