OX Security vs Strobes ASPM
OX Security
ox.security
Strobes ASPM
strobes.coSide by side
| Figure | OX Security | Strobes ASPM |
|---|---|---|
| Price from | Free | $2,416.67/mo |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | Yes |
| macOS | Yes | Yes |
| Linux | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | Yes | Yes |
| Plans published | 6 | 4 |
| Spec score · Application Security Orchestration Platforms | 8.5 (#5) | 8.7 (#4) |
| Spec score · Application Security Posture Management Software | 8.5 (#4) | 8.7 (#3) |
| API | The public API retrieves applications, artifacts, issues, severity factors, and attack-path graphs, and supports policy and workflow integrations. | The developer platform exposes GraphQL at /api/graphql/ for querying and mutating assets, findings, engagements and assessments. |
| Company legal name | The vendor identifies itself legally as OX Appsec Security Ltd. and affiliates. | The company-data profile identifies the legal name as Strobes Security, Inc. |
| Deployment | OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup. | The platform page says Strobes is available as cloud SaaS or private deployment. |
| Documentation | The help center covers onboarding, scanners, integrations, policies, remediation, runtime sensors, multiple BOM types, workflows, reporting, administration, and API documentation. | The help center lists 45 exposure-management articles, 39 integration articles, 34 agentic-pentesting articles and sections for dashboards, workflows and administration. |
| Funding | OX announced a $60 million Series B in May 2025, bringing total disclosed funding to $94 million. | BounceWatch records four rounds totaling $780,000, including a $400,000 seed round from Chitra Holdings Inc. on March 5, 2022. |
| Headquarters | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. | Plano, Texas, United States |
| Integrations | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. | The integrations catalog advertises more than 100 connectors spanning scanners, cloud security, containers, ticketing and development tools. |
| Notable news | OX announced its Active ASPM platform on January 31, 2024, combining native scanners, contextual prioritization, attack-path analysis, and automated workflows. | Strobes’ press page records a 2022 SOC 2 Type 1 compliance achievement and a 2022 growth-capital announcement involving SucSEED Indovation Fund. |
| Prioritization | OX correlates findings with exploitability, reachability, business impact, and application context to reduce duplicated or low-value alerts. | Its risk scoring uses exploit likelihood, asset criticality, and compensating controls, with EPSS and KEV included in the displayed risk context. |
| Rating on G2 | 4.8 out of 5 from 51 reviews | 4.6 out of 5 from 35 reviews |
| Security certifications | OX states that SOC 2 Type II materials are available on request and that it is ISO 27001:2022 certified and GDPR compliant. | The company says it holds SOC 2 Type 2, ISO 27001:2022, CREST and CERT-In credentials and aligns testing with OWASP, NIST, SANS 25 and OSSTMM. |
| What it does | OX Security provides application security from AI-assisted coding through production runtime, linking findings back to their creation point. | Strobes ASPM consolidates SAST, DAST, SCA, container, secrets, IaC, runtime, penetration-test and bug-bounty findings into one risk-prioritized application-security view. |
Plans
OX Security
- Free servicesFree
- OX Agentic PentesterPriced on request
- OX CloudPriced on request
- OX CodePriced on request
- OX PlatformPriced on request
- OX VibeSecPriced on request
Strobes ASPM
- FreeFree
- Starter$29,000 a year
- Growth$45,000 a year
- EnterprisePriced on request
In their own words
OX Security
OX Security is an application security platform that covers software from code through runtime, including protection in AI editors and IDEs. OX Code addresses SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes runtime security, cloud posture tools, inventory and attack-path mapping; OX VibeSec applies organization-specific context to AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments and proof-of-concept exploitation, with OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and ChatGPT. It supports hybrid deployment and lists on-premises options, SSO, automatic provisioning, MCP and API support. OX says it connects to existing tools without agents or complex setup. Pricing is available on request, based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.
Strobes ASPM
Strobes ASPM brings application-security findings into a risk-prioritized view for developers and security teams. It ingests findings from SAST, DAST, software composition analysis, container scanners, penetration tests, and bug bounty programs. Risk scoring considers exploit likelihood, asset criticality, and compensating controls, with EPSS and KEV in the displayed context. In CI/CD, it can enforce security policy, block critical findings, warn on high findings, and provide feedback in pull requests. AI agents can triage and deduplicate findings, create and route tickets, track SLAs, and check fixes through rescanning. The integrations page lists more than 100 tools, including security scanners and cloud services; a GraphQL API supports querying and changing assets, findings, engagements, and assessments. Deployment options include cloud SaaS or private deployment. The free plan costs nothing and allows up to 100 assets, 500 tasks per month, and one connector. Starter costs $29,000 a year; Growth costs $45,000 a year. A 14-day trial offers access to ASM, RBVM, PTaaS, ASPM, and AI Agents, with guided onboarding by a dedicated security engineer.