Endor Labs vs OX Security
Endor Labs
endorlabs.comOX Security
ox.securitySide by side
| Figure | Endor Labs | OX Security |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 3 | 6 |
| Spec score · DevSecOps Platforms | 8.9 (#2) | 8.5 (#5) |
| Company legal name | Crunchbase lists the legal entity as Endor Labs Inc., an active for-profit company founded by Dimitri Stiliadis and Varun Badhwar. | The vendor identifies itself legally as OX Appsec Security Ltd. and affiliates. |
| Deployment | Customers can scan through cloud apps, inside CI/CD runners, or use Endor Outpost for scheduled monitoring scans and on-premises deployment. | OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup. |
| Founded | 2021 | OX Security was founded in 2021. |
| Headquarters | Palo Alto, California, United States | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. |
| Integrations | Documented integrations include GitHub, GitLab, Jenkins, Jira, Slack, Microsoft Defender for Cloud, Azure DevOps, Bitbucket, and cloud marketplaces. | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. |
| Rating on G2 | 4.8 out of 5 from 10 reviews | 4.8 out of 5 from 51 reviews |
| Self-hosting | Endor Outpost is offered as an on-premises deployment for eligible customers with strict residency or compliance requirements. | The pricing page lists an on-premises deployment option, and the IDE documentation supports custom API endpoints for on-premises environments. |
| What it does | Endor Labs is an application-security platform that analyzes first-party code, open-source dependencies, secrets, containers, and AI-generated software. | OX Security provides application security from AI-assisted coding through production runtime, linking findings back to their creation point. |
Plans
OX Security
- Free servicesFree
- OX Agentic PentesterPriced on request
- OX CloudPriced on request
- OX CodePriced on request
- OX PlatformPriced on request
- OX VibeSecPriced on request
In their own words
Endor Labs
Endor Labs is an application security platform spanning code, secrets, dependencies, container images and coding agents. AURI for Developers helps scan for vulnerabilities, detect secrets and block malicious dependencies in AI coding workflows. Endor Code provides AI SAST and secrets detection; Endor Open Source adds reachability-based SCA, malicious-package detection, AI model governance, and SBOM and VEX generation. The platform can inventory coding agents, models, MCP servers and skills, then enforce policies on agent actions. Integrations include GitHub, GitLab, Bitbucket, CircleCI, Jenkins, Jira, Slack, Vanta, Cursor, Claude, Gemini and GitHub Copilot. Scans can run through cloud apps, inside CI/CD runners or with Endor Outpost for scheduled monitoring and on-premises deployment. The company says cloud scanning briefly clones code into a container that is destroyed after scanning, while CI/CD scanning keeps code in the runner. The free Developer tier supports local scans and read-only vulnerability data, but has no UI, policies or scan history. Paid plans are seat-based and require contacting sales for pricing.
OX Security
OX Security is an application security platform that covers software from code through runtime, including protection in AI editors and IDEs. OX Code addresses SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes runtime security, cloud posture tools, inventory and attack-path mapping; OX VibeSec applies organization-specific context to AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments and proof-of-concept exploitation, with OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and ChatGPT. It supports hybrid deployment and lists on-premises options, SSO, automatic provisioning, MCP and API support. OX says it connects to existing tools without agents or complex setup. Pricing is available on request, based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.