OX Security vs Phoenix Security
OX Security
ox.security
Phoenix Security
phoenix.securitySide by side
| Figure | OX Security | Phoenix Security |
|---|---|---|
| Price from | Free | £1,495/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 6 | 3 |
| Spec score · Application Security Posture Management Software | 8.5 (#4) | 8.5 (#5) |
| Company legal name | The vendor identifies itself legally as OX Appsec Security Ltd. and affiliates. | Crunchbase identifies the legal entity as Security Phoenix Ltd and lists it as an active private for-profit company. |
| Company size | LinkedIn lists the company size as 51–200 employees and displays 212 employees discoverable on the platform. | Gartner lists Phoenix Security as having 11–50 employees. |
| Documentation | The help center covers onboarding, scanners, integrations, policies, remediation, runtime sensors, multiple BOM types, workflows, reporting, administration, and API documentation. | The public knowledge base contains REST API, integration, settings, onboarding, workflow, vulnerability, application-management and user-management sections. |
| Founded | OX Security was founded in 2021. | Gartner records Phoenix Security’s founding year as 2022. |
| Funding | OX announced a $60 million Series B in May 2025, bringing total disclosed funding to $94 million. | Crunchbase shows six pre-seed funding rounds but masks the amounts and investor totals. |
| Headquarters | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. | The About page lists Phoenix Security UK HQ at 124 City Road, EC1V 2NX. |
| Integrations | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. | GetApp lists integrations including Mend, Qualys Cloud Platform, GitHub, Jira, JFrog Xray, Nessus, Detectify, SonarQube, Snyk, Microsoft Teams, Slack, SonarCloud and ServiceNow. |
| Licence | OX software is proprietary; terms grant a revocable, non-exclusive access licence and reserve OX ownership of the software and related intellectual property. | The SaaS terms prohibit copying, reverse engineering, source-code derivation and derivative works, indicating the core platform is proprietary rather than open source. |
| Prioritization | OX correlates findings with exploitability, reachability, business impact, and application context to reduce duplicated or low-value alerts. | Phoenix says it prioritizes deployed, running, and reachable exposure using threat intelligence and business context. |
| Rating on GetApp | 4.7 out of 5 from 3 reviews | 4.7 out of 5 from 74 reviews |
| Security certifications | OX states that SOC 2 Type II materials are available on request and that it is ISO 27001:2022 certified and GDPR compliant. | Phoenix’s current platform page states that it is SOC 2 Type II and ISO 27001 certified. |
| What it does | OX Security provides application security from AI-assisted coding through production runtime, linking findings back to their creation point. | Phoenix Security is a cloud application-security posture and unified vulnerability-management platform that correlates findings from code, dependencies, containers, cloud, runtime and ticketing into remediation workflows. |
Plans
OX Security
- Free servicesFree
- OX Agentic PentesterPriced on request
- OX CloudPriced on request
- OX CodePriced on request
- OX PlatformPriced on request
- OX VibeSecPriced on request
Phoenix Security
- Phoenix FreeFree
- Phoenix Professional£1,495 a month
- Phoenix EnterprisePriced on request
In their own words
OX Security
OX Security is an application security platform that covers software from code through runtime, including protection in AI editors and IDEs. OX Code addresses SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes runtime security, cloud posture tools, inventory and attack-path mapping; OX VibeSec applies organization-specific context to AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments and proof-of-concept exploitation, with OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and ChatGPT. It supports hybrid deployment and lists on-premises options, SSO, automatic provisioning, MCP and API support. OX says it connects to existing tools without agents or complex setup. Pricing is available on request, based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.
Phoenix Security
Phoenix Security is a cloud platform for security governance that connects code findings with runtime exposure. It combines findings from SAST, SCA, containers, cloud, runtime, and ticketing in a normalized, deduplicated model, then maps ownership and prioritizes deployed, running, reachable exposure using threat intelligence and business context. Its AI agents can prepare minimum-impact fix plans, open pull requests when users opt in, run remediation campaigns, and measure risk reduction. The platform connects with security scanners and technology stacks across application, infrastructure, cloud, and container security; listed integrations include Microsoft Defender for Cloud, Lacework, Sysdig, Google Cloud SCC, and Aikido. Phoenix Free is free and includes up to 1,000 assets, two premium users plus guests, community support, and dashboard reporting. Professional costs £1,495/mo and lists 5,000 asset credits, 10 security admins plus guests, and 300 or more users. Enterprise pricing is available by contact and lists dedicated hosting and bring-your-own encryption key.