DEVOPSdigest

Ox Security exited stealth today with $34M in funding led by Evolution Equity Partners, Team8, and M12, Microsoft's venture fund, with participation from Rain Capital.

Ox was founded less than a year ago by Neatsun Ziv and Lior Arzi, two top Check Point executives. Its platform is already used by over 30 leading companies to secure their software supply chains, including Kaltura and Bloomreach.

Ox is developing a new open standard, PBOM, in collaboration with leading cybersecurity-conscious companies. The Pipeline Bill of Materials (PBOM) includes within it the SBOM but goes further, covering not only the code in the final product but also the procedures and processes that impacted the software throughout its development. Ox and its partners undertook extensive research on the root causes of more than 70 attacks from the past year. They specifically designed the PBOM to contain the information that would have been needed to prevent each of the recent attacks.

Ox's platform uses the PBOM standard to provide end-to-end software supply chain security, allowing it to cover every step of the development pipeline, from the earliest planning stages until deployment to production. OX seamlessly integrates with existing tools and infrastructure to monitor and record every action affecting software throughout the entire development life-cycle. It gives security and DevOps teams complete visibility and control over the attack surface, including source code, pipeline, artifacts, container images, runtime assets, and applications.

"Developers and DevOps make constant changes to the software supply chain, adding new tools, open source components and SaaS services," said Neatsun Ziv, Ox's CEO and co-founder. "The Ox platform gives DevSecOps teams real-time, end-to-end visibility into all aspects that impact software through the entire pipeline, so they have the necessary context and control to ensure security."

Ox connects to an organization's code repository and performs a scan of the environment from code to cloud, to automatically produce a full mapping of assets, apps and pipelines. Ox identifies which security tools are in use, verifies they're all connected and operational, and determines if additional tools are necessary. Following the scan, Ox presents any security issues that were found, prioritized by their business impact, alongside context, automated fixes and recommendations, empowering DevSecOps teams to tackle their cybersecurity backlog. A PBOM, which includes an SBOM, version lineage, SaaSBOM, build hashes and more, can be automatically generated and shared with internal stakeholders or customers, so they in turn can verify that the software they use is derived from trusted, secure builds.

"Ox Security is tackling a critical challenge facing companies today, and are uniquely positioned to become leaders in their space," said Nadav Zafrir, Managing Partner at Team8 Group and former head of Israel's elite intelligence Unit 8200. "We are thrilled to join forces with Neatsun and Lior. The groundbreaking PBOM standard enables Ox's platform to provide unparalleled security coverage and I have no doubt that PBOM will be widely adopted across the industry.