OX Security Launches CNAPP Platform Without Pricing or Customer Data

OX Security enters CNAPP market with bundled posture management

OX Security released OX Cloud on September 16, 2026, bundling Cloud Security Posture Management with Kubernetes, data, runtime, inventory, and attack-path analysis in a single platform. The company disclosed no pricing, customer count, or quantified performance data, leaving enterprise buyers without the cost and efficacy metrics needed to compare it against Wiz, Palo Alto Networks Prisma Cloud, Microsoft Defender for Cloud, or Orca Security.

OX Cloud includes CSPM, Kubernetes Security Posture Management, Data Security Posture Management, runtime vulnerability detection, cloud inventory, and graph-based attack-path analysis. The platform is available to existing and new customers, but OX did not publish workload-based pricing, module-level entitlements, cloud-account limits, or independent benchmark results.

The competitive context favors established platforms

OX Cloud competes in a CNAPP market shaped by Google Cloud's approximately $32 billion acquisition of Wiz, completed in March 2026. Wiz is now positioned as an agentless, multi-cloud platform under Google ownership. Prisma Cloud spans CSPM, workload protection, Cloud Infrastructure Entitlement Management, DSPM, and application security posture management. Microsoft Defender for Cloud remains the default for Azure-centric enterprises. Orca Security, CrowdStrike Falcon Cloud Security, Tenable Cloud Security, and Check Point CloudGuard round out the competitive set.

The market has moved from standalone CSPM to consolidated CNAPP platforms that combine posture scanning with runtime, identity, data, Kubernetes, and software-supply-chain controls. OX Cloud follows that pattern, but the absence of disclosed pricing and outcome data makes it difficult to determine whether it can displace entrenched platforms or primarily extends OX's existing application-security footprint into cloud posture.

What buyers need to validate

Enterprises evaluating OX Cloud should request specific pricing models, including per-workload costs, module-level entitlement boundaries, and cloud-account limits. Without published pricing, procurement teams cannot calculate total-cost-of-ownership savings or compare licensing economics against Wiz's agentless model, Prisma Cloud's bundled approach, or Defender for Cloud's Azure-native pricing.

Buyers should also demand independent efficacy testing. OX did not disclose detection rates, false-positive benchmarks, mean-time-to-detection, or third-party validation. Enterprises replacing or consolidating existing CSPM, KSPM, or DSPM tools need quantified evidence that OX Cloud detects misconfigurations, privilege escalation paths, and data exposure risks as effectively as established alternatives.

Existing OX Security customers may have a lower adoption barrier if OX Cloud is available through their current contract, but they should verify integration depth, data-flow dependencies, and whether the bundled modules require separate licensing or capacity tiers.

Wiz acquisition creates diligence questions for multi-cloud buyers

Google's acquisition of Wiz introduces a practical issue for enterprises evaluating any CNAPP platform. Wiz's value proposition remains multi-cloud, but its ownership has changed. Buyers should verify roadmap commitments for AWS and Azure support, data residency options, support separation from Google Cloud Platform issues, contract terms governing future price changes, and interoperability with non-Google clouds. The acquisition does not automatically make Wiz a Google-only product, but it shifts the diligence burden to the buyer to confirm continued multi-cloud parity.

What to watch

OX Security needs to disclose pricing and quantified performance data for OX Cloud to compete on measurable terms. Enterprises should track whether OX publishes customer adoption metrics, third-party benchmark results, or specific detection improvements over the next quarter. Without that data, OX Cloud remains a product announcement rather than a validated alternative to Wiz, Prisma Cloud, or Defender for Cloud.

Buyers should also monitor whether Google integrates Wiz more tightly into Google Cloud Platform or maintains its current multi-cloud independence. Any shift in roadmap priority, pricing structure, or support model will affect the competitive calculus for enterprises with AWS or Azure as their primary cloud.