ArcherySec vs OX Security
ArcherySec
archerysec.comOX Security
ox.securitySide by side
| Figure | ArcherySec | OX Security |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 6 |
| Spec score · Application Security Orchestration Platforms | 8.9 (#2) | 8.5 (#5) |
| API | The documentation describes REST APIs for scanning and vulnerability management. | The public API retrieves applications, artifacts, issues, severity factors, and attack-path graphs, and supports policy and workflow integrations. |
| Deployment | The project README documents Linux and Windows installation, Docker images, Docker Compose, and AWS serverless deployment using Zappa. | OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup. |
| Founded | 2017 | OX Security was founded in 2021. |
| Headquarters | India | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. |
| Integrations | Documented connectors include OWASP ZAP, Burp, Arachni, OpenVAS, Jira, and email. | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. |
Plans
OX Security
- Free servicesFree
- OX Agentic PentesterPriced on request
- OX CloudPriced on request
- OX CodePriced on request
- OX PlatformPriced on request
- OX VibeSecPriced on request
In their own words
ArcherySec
ArcherySec is a free, open-source vulnerability assessment and management tool for developers, penetration testers, and DevOps teams. It scans web applications and networks through supported tools, then brings scan findings together for review. Features include authenticated web scans, Selenium-based web application scanning, severity-based prioritization, false-positive tracking, finding deduplication, and remediation workflows. The product lists more than 80 commercial and open-source tool integrations; documented connectors include OWASP ZAP, Burp, Arachni, OpenVAS, Jira, and email. Its CLI can run in CI/CD pipelines and return pass or fail exit codes according to configured scan policies. REST APIs cover scanning and vulnerability management. The tool supports periodic and concurrent scans. Deployment documentation covers Linux, Docker, and Vagrant with Ansible, and the project provides Windows setup and run scripts. ArcherySec is self-hosted and distributed under the GPL-3.0 license. Users need to run supported scanners and provide their endpoints. The project advises against public exposure and recommends restricting the signup page in production.
OX Security
OX Security is an application security platform that covers software from code through runtime, including protection in AI editors and IDEs. OX Code addresses SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes runtime security, cloud posture tools, inventory and attack-path mapping; OX VibeSec applies organization-specific context to AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments and proof-of-concept exploitation, with OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and ChatGPT. It supports hybrid deployment and lists on-premises options, SSO, automatic provisioning, MCP and API support. OX says it connects to existing tools without agents or complex setup. Pricing is available on request, based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.