No more typing reviews! Try our Samantha, our new voice AI agent.

Endor Labs vs Ox Security comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Endor Labs
Ranking in Static Application Security Testing (SAST)
33rd
Ranking in Software Composition Analysis (SCA)
20th
Ranking in Software Supply Chain Security
16th
Average Rating
0.0
Number of Reviews
0
Ranking in other categories
Build Automation (32nd), DevSecOps (17th)
Ox Security
Ranking in Static Application Security Testing (SAST)
24th
Ranking in Software Composition Analysis (SCA)
15th
Ranking in Software Supply Chain Security
9th
Average Rating
8.6
Reviews Sentiment
7.5
Number of Reviews
2
Ranking in other categories
Application Security Posture Management (ASPM) (10th)
 

Mindshare comparison

As of August 2026, in the Static Application Security Testing (SAST) category, the mindshare of Endor Labs is 0.8%, up from 0.5% compared to the previous year. The mindshare of Ox Security is 1.2%, up from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Mindshare Distribution
ProductMindshare (%)
Ox Security1.2%
Endor Labs0.8%
Other98.0%
Static Application Security Testing (SAST)
 

Featured Reviews

Use Endor Labs?
Leave a review
Yossi Shmulevitch - PeerSpot reviewer
Owner at SoftContact
Experience has raised visibility into vulnerabilities but still demands deeper customization options
Regarding threat detection capability, I think that Ox Security is not used for that matter. The CISO mainly focuses on dev sec ops rather than runtime security or real-time security. I figure that the most important metrics for the analytics feature are the critical issues dashboard, which helps understand whether there is a leak of a secret or a very critical vulnerability that is not being used. Another important aspect is the integration with other products like JFrog and X-ray, which shows not all the findings but mostly focuses on what Ox Security considers the most important issues. For instance, we found some issues that were flagged by JFrog, but Ox Security dismissed them, leading to discussions about whether those issues are real, as there are often false positives in the security world, as well as considerations about the attack surface for each vulnerability and whether these are truly critical issues or not. I work extensively with JFrog X-ray, which is my major tool for another customer. I believe that JFrog is more pinpointing, and I have some integration with JFrog with the build system, the CI/CD and X-ray vulnerabilities meter. It's quite useful, but I think that they serve different purposes; JFrog comes mostly from the artifact management side and less from security. Ox Security is mostly focused on the DevSecOps and areas that cannot be detected. In terms of vulnerability management, Ox Security has strong integration, but sometimes there are vulnerabilities that are disputed or dismissed, which creates an interesting intersection between the two products. From what I talked about with the DevOps team, deployment is quite straightforward. My overall review rating for Ox Security is zero.
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
University
9%
Construction Company
8%
Financial Services Firm
8%
Comms Service Provider
7%
Financial Services Firm
14%
Manufacturing Company
13%
Computer Software Company
10%
Educational Organization
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
No data available
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with Ox Security?
I'm not sure about flexibility because I didn't try it, so I can't comment on that, but as far as I understand, most of Ox Security is not personalized. I think that most of the tool is quite deter...
What is your primary use case for Ox Security?
I worked with Ox Security as a service provider, not as a representative, but as a user. I use it in my employee capacity, providing services to companies in Israel, and one of them is an insurance...
What advice do you have for others considering Ox Security?
Regarding threat detection capability, I think that Ox Security is not used for that matter. The CISO mainly focuses on dev sec ops rather than runtime security or real-time security. I figure that...
 

Comparisons

 

Overview

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Static Application Security Testing (SAST). Updated: August 2026.
908,834 professionals have used our research since 2012.