Introducing the OX Security CLI
The promise of “shift left” is clear: catch vulnerabilities early, reduce risk, and move faster. But too often, the reality is something else—bloated toolchains, broken workflows, and slow scans that interrupt developer velocity.
OX Security is changing that.
As the leader in Application Security Posture Management (ASPM), OX Security is focused on what matters: efficiency, flexibility, and true risk reduction. Our new Command Line Interface (CLI) extends that value directly into the developer environment—allowing security scanning to happen earlier, faster, and with zero disruption.
Whether developers are working solo in a terminal or contributing to a large enterprise codebase, the OX CLI makes it possible to shift left without slowing down.
Efficiency That Fits the Way You Work
The OX CLI enables developers to scan code locally—on demand or as a pre-commit hook—without waiting on CI/CD pipelines or introducing process bottlenecks. This dramatically improves turnaround time for security feedback and reduces unnecessary build failures caused by issues that could have been caught earlier in the software development lifecycle (SDLC). The benefits are myriad, but the highlights include:
- Immediate results: Developers can check for vulnerabilities before code is ever committed
- No pipeline delay: Security feedback is delivered instantly, not post-merge
- Pre-commit protection: Prevents risky code from entering the repository in the first place
With average scan times under 80 seconds—even on large or monolithic repositories—the CLI is engineered for speed. Incremental scanning and Git-aware targeting allow developers to focus on just the files they’ve changed, making scans even faster.
The result? DevOps and AppSec teams spend less time waiting and more time building.
Flexibility to Meet Any Developer Workflow
Every team, stack, and environment is different. The OX CLI was built to accommodate all of them. OX’s new capability offers:
- Cross-platform support: Works on Windows, macOS, and Linux
- Simple installation: Available via NPM or Docker—no friction, no forced dependencies
- Customizable scanning: Target a file, a folder, multiple paths, Git-tracked files, or use wildcards. Exclude anything irrelevant
Whether teams are scanning a single script or the entire repo, the CLI adapts to workflows, not the other way around. It integrates easily into existing toolchains, CI systems, or development scripts, with results provided in JSON and support for SARIF and HTML on the roadmap.
Unified Security, End-to-End
The CLI is more than just a local scanner. It’s a fully integrated part of the OX Security Platform, giving AppSec teams full visibility across the SDLC. Local scans feed into a centralized risk posture—prioritized, correlated, and enriched with context.
It’s part of how OX delivers on the ASPM promise: one platform to manage and reduce real application risk—from code to cloud, from local dev to runtime.
And since the CLI is the conduit through which “shift left” and efficiency are achieved, it’s important to note that AI-powered remediation is now natively integrated into developers’ local workflows, bringing security fixes directly to where code is written.
With this combination of capabilities, DevOps teams no longer need to switch tools, wait on CI feedback, or sift through generic recommendations. OX delivers real-time, context-aware fixes tailored to the exact code and environment being worked on, allowing developers to scan and remediate vulnerabilities in a single motion.
This seamless, in-workflow experience increases development velocity and improves security outcomes by reducing the likelihood of overlooked issues or inconsistent patches. By combining smart local scanning with AI-driven remediation, OX enables teams to resolve high-impact risks earlier and more efficiently—closing gaps before they reach production.
Shift Left Without Compromise
With the OX CLI, shift-left security finally works how it was always meant to: efficiently, flexibly, and in a developer-friendly way. If you’re looking for software development improvement and AppSec gain, OX’s new CLI functionality promises:
- No slowdowns
- No rigid integrations
- No extra noise
Just the insights you need, delivered when and where you need them.
OX Security continues to lead the AppSec market by focusing on what matters most: enabling secure development at scale—without getting in the way.
Try the OX CLI today.
Shift left on your terms—with the speed and flexibility modern software demands.
