What is the core value proposition of OX Security according to the deck?

The core value proposition is providing 'full visibility and end-to-end traceability' across the entire software pipeline—from code and CI/CD to artifact registries and production. As shown on Slide 5 and 6, the platform aims to automate the blocking of critical vulnerabilities and ensure the integrity of cloud assets by verifying their origin through a secure pipeline.

How does OX Security differentiate itself from traditional AppSec tools?

On Slide 4, the deck notes that while most organizations have AppSec tools, 62% still faced supply chain attacks in 2021. OX differentiates by covering the 'new security frontier' of the pipeline itself, treating the supply chain as ephemeral and focusing on integrity and automated gates rather than just static scanning.

What specific cyberattacks does the deck use to justify its existence?

Slide 4 explicitly maps several major breaches to different stages of the software lifecycle: Codecov (Plan), Peloton (Code), Log4j (Build), SolarWinds (Release), BitGo (Deploy), and Equifax (Operate/Monitor). This demonstrates that vulnerabilities exist at every step, requiring a holistic solution.

Does the deck include financial projections or a team overview?

No. The 15-slide deck provided focuses exclusively on the problem, market context, and product functionality. It omits traditional slides like the founding team's pedigree, current revenue/ARR, market size (TAM), and the specific breakdown of how the $34M Series A funds will be spent.

What technical concepts are central to the OX Security platform?

The deck highlights 'PBOM' (Pipeline Bill of Materials) on Slide 7, which ensures artifacts in production are signed and secure. It also emphasizes 'Infrastructure as Code' (IaC) security, 'SCA' (Software Composition Analysis), and 'SBOM' (Software Bill of Materials) integration as part of its end-to-end discovery process.

OX Security Pitch Deck: All 15 Slides + Teardown

See all 15 slides of the OX Security pitch deck — a 2022 Series A deck — with a slide-by-slide teardown of what the deck does well and where it falls short.

OX Security’s 15-slide Series A deck is a highly technical, product-centric presentation that successfully secured $34M in 2022. The narrative transitions quickly from macro-level threats—citing that 62% of organizations faced supply chain attacks in 2021—to granular product functionality. By focusing on 'end-to-end traceability' and automated vulnerability blocking, the deck positions OX as a necessary evolution of the DevSecOps pipeline rather than just another scanning tool. While the deck lacks traditional business metrics like ARR or a team slide in this public version, its strength lies…

Key takeaways

The deck leverages third-party validation early, citing a DarkReading report that over half of initial infections come via exploits and supply chain compromises (Slide 2).
OX Security defines the problem through high-profile failures, mapping attacks like SolarWinds, Log4j, and Equifax across the software lifecycle (Slide 4).
The 'Discover' phase emphasizes visibility across 350 repos and 434 cloud assets, showcasing the platform's ability to handle scale (Slide 5).
Automation is presented as a policy-driven engine that can 'block vulnerabilities' from being merged, moving beyond simple detection (Slide 6).
The concept of a 'PBOM' (Pipeline Bill of Materials) is introduced to ensure every artifact in production originates from a secure, signed pipeline (Slide 7).
The deck omits standard fundraising slides such as the Team, Financials, and the specific 'Ask,' focusing entirely on the technical value proposition.
Reported facts indicate the company raised $34M in a Series A round in 2022, headquartered in the Middle East.
Visual storytelling is used to explain the 'ephemeral' nature of modern software supply chains, where code is replaced rather than patched (Slide 3).

The Technical Pivot: How OX Security Framed a $34M Series A

OX Security’s pitch deck is a focused, technical document that prioritizes product architecture and problem-mapping over traditional business metrics. In a 2022 cybersecurity market that was increasingly wary of 'point solutions,' OX used these 15 slides to argue for a platform-level approach to the software supply chain. According to publisher-reported facts, this deck supported a $34M Series A round, a significant sum that reflects the urgency of the problem space they addressed.

Slide 1: The Identity

The title slide is minimalist, featuring the OX Security logo and the tagline: Stop Attacks Across Your Software Supply Chain . Dated September 2022, it sets a professional tone. The branding uses a bull icon, which reappears throughout the deck as a mascot, humanizing a deeply technical product. The simplicity here suggests a company that is confident in its name recognition within the cybersecurity community or is presenting to an audience already familiar with the space.

Slide 2: Establishing the Threat Landscape

OX immediately moves to third-party validation. They feature a headline from DarkReading: More Than Half of Initial Infections in Cyberattacks Come Via Exploits, Supply Chain Compromises . The slide includes a donut chart attributed to Mandiant for the year 2021, showing that 'Exploits' (37%) and 'Supply Chain Compromise' (17%) are the leading vectors. By citing Mandiant and DarkReading, OX grounds their pitch in industry-standard data, removing the 'founder bias' from the problem statement.

Slide 3: The Shift to DevSecOps

This slide explains the 'Why Now.' It argues that DevSecOps is changing the game . The key points are that the modern software supply chain is 'ephemeral'—meaning code is replaced rather than patched—and that the pipeline itself is the 'new security frontier.' A large infinity-loop diagram visualizes the Dev and Ops cycles, with 'Security' wrapping around the entire process. This slide is crucial because it moves the conversation from 'fixing bugs' to 'securing the factory' that builds the software.

Slide 4: Mapping the Failure Points

Slide 4 is perhaps the most effective in the deck. It states that despite most organizations having implemented AppSec tools , 62% still faced supply chain attacks in 2021. The slide visualizes a timeline from 'Plan' to 'Monitor,' placing famous logos at their point of failure: Codecov, Peloton, Log4j, SolarWinds, BitGo, and Equifax . This creates a sense of 'inevitability'—if these giants failed with traditional tools, the investor realizes a new category of security is required.

Slide 5: The 'Discover' Phase

Here, OX transitions into the product. The 'Discover' slide promises full visibility and end-to-end traceability . The graphic shows a linear flow from Source Control to Security Logs. It lists specific integrations and metrics, such as 350 Repos, 10 CI/CD Pipelines, 20 Artifacts, and 434 Cloud Assets . This slide proves the platform can handle the complexity of a modern enterprise environment, showing logos like GitLab, Checkmarx, and AWS.

Slide 6: The 'Automate' Phase

OX moves from visibility to action. The 'Automate' slide explains how the platform can automatically block vulnerabilities . It shows a policy engine interface where users can set rules (e.g., if a secret is found in code, 'Block-Pipeline'). Below the table is a logic flow diagram showing how a Webhook triggers an 'If/Then' sequence that ends in a Jira ticket, a Slack message, or a GitLab block. This demonstrates that OX isn't just a dashboard; it’s an active participant in the development workflow.

Slide 7: The 'Secure' Phase and Integrity

The final product slide focuses on Integrity of cloud assets . It introduces the concept of a PBOM (Pipeline Bill of Materials) . The goal is to ensure every artifact in production originates from a secure, signed pipeline. The slide shows a dashboard with 'Risk Scores' and 'Business Priority' for various apps (e.g., 'app/scanner' with a score of 383). This is the 'bottom line' for a CISO: a single view to see if what is running in the cloud is actually what they intended to build.

Slide 8-15: The Missing Narrative

The provided text for slides 8 through 15 simply repeats 'OX Security.' In a standard pitch deck, these slides would typically cover the Business Model, Go-To-Market Strategy, Competition, Team, and The Ask . The fact that these are omitted in the public version suggests either a highly confidential strategy or a deck that relied heavily on a verbal presentation. However, based on the first seven slides, the technical foundation is clearly the 'hero' of the pitch.

What OX Security Does Well

The deck excels at contextualizing the problem . By mapping specific, well-known breaches to a timeline of the software development lifecycle, OX makes a complex technical problem feel tangible. They avoid the trap of 'fear-mongering' by using reputable data from Mandiant and DarkReading, which builds immediate credibility with sophisticated investors.

Furthermore, the Product-Led approach is strong. Instead of abstract promises, the deck shows actual UI components and logic flows. Seeing the 'Policy' table on Slide 6 allows an investor to visualize exactly how a customer would use the product. This reduces the 'black box' risk often associated with cybersecurity startups.

What is Missing from the Deck

The most glaring omission is the Team Slide . In a Series A, the pedigree of the founders (especially in a region like the Middle East, known for elite cyber talent) is often 50% of the investment decision. Without seeing the expertise behind the 'PBOM' concept, the technical claims carry less weight.

Additionally, there is no Traction or Financials slide . While the 'Discover' slide mentions 350 repos, it isn't clear if these are from a single pilot customer or an aggregate across a large user base. Investors typically want to see ARR growth, churn rates, or at least a pipeline of enterprise logos to justify a $34M valuation. The Competitive Landscape is also ignored; the deck assumes OX is the only solution to this problem, which is rarely the case in the crowded DevSecOps market.

Lessons for Founders

Use the 'Timeline of Failure': If you are solving a problem that existing tools failed to fix, map those failures visually. Slide 4 is a perfect example of how to show a gap in the market by using real-world examples. · Define a New Standard: OX didn't just say they scan code; they introduced the 'PBOM.' Creating your own terminology (if it makes sense) helps position your company as a category leader rather than a feature. · Show, Don't Just Tell: The inclusion of the logic flow on Slide 6 is powerful. It shows that the product is 'plumbed' into the developer's existing tools (Slack, Jira, GitLab), which addresses the common concern of 'tool fatigue.' · Lead with Data: Start with macro-trends from respected third parties. It sets a professional baseline and ensures the investor agrees with your premise before you ever show the product.

Frequently asked questions

What is the core value proposition of OX Security according to the deck?: The core value proposition is providing 'full visibility and end-to-end traceability' across the entire software pipeline—from code and CI/CD to artifact registries and production. As shown on Slide 5 and 6, the platform aims to automate the blocking of critical vulnerabilities and ensure the integrity of cloud assets by verifying their origin through a secure pipeline.
How does OX Security differentiate itself from traditional AppSec tools?: On Slide 4, the deck notes that while most organizations have AppSec tools, 62% still faced supply chain attacks in 2021. OX differentiates by covering the 'new security frontier' of the pipeline itself, treating the supply chain as ephemeral and focusing on integrity and automated gates rather than just static scanning.
What specific cyberattacks does the deck use to justify its existence?: Slide 4 explicitly maps several major breaches to different stages of the software lifecycle: Codecov (Plan), Peloton (Code), Log4j (Build), SolarWinds (Release), BitGo (Deploy), and Equifax (Operate/Monitor). This demonstrates that vulnerabilities exist at every step, requiring a holistic solution.
Does the deck include financial projections or a team overview?: No. The 15-slide deck provided focuses exclusively on the problem, market context, and product functionality. It omits traditional slides like the founding team's pedigree, current revenue/ARR, market size (TAM), and the specific breakdown of how the $34M Series A funds will be spent.
What technical concepts are central to the OX Security platform?: The deck highlights 'PBOM' (Pipeline Bill of Materials) on Slide 7, which ensures artifacts in production are signed and secure. It also emphasizes 'Infrastructure as Code' (IaC) security, 'SCA' (Software Composition Analysis), and 'SBOM' (Software Bill of Materials) integration as part of its end-to-end discovery process.

Cover slide of the OX Security pitch deck — Series A 2022 — OX Security pitch deck, slide 1 (2022)

OX Security pitch deck: the facts

Company: OX Security
Year: 2022
Stage: Series A
Slides: 15
Sector: Cybersecurity
Deck type: Fundraising
Outcome: $34M Raised
Headquarters: Middle East

OX Security pitch deck PDF

The full OX Security deck is embedded on this page and can be read slide by slide in the browser — no download or account required. Each slide is covered in the breakdown above.

What the OX Security pitch deck was used for

This deck is the fundraising presentation OX Security used around September 2022 to support its $34M seed financing for its software supply chain security platform, a round that included Microsoft’s venture fund M12.[1][6][10] The company’s positioning in this period centered on securing the modern software supply chain and CI/CD pipelines against emerging supply chain attacks, with a workflow framed as Discover, Automate, Secure, and references to high‑profile breaches to justify its approach.[1][6][10] The deck was used at an early stage when OX Security had raised one of the largest seed rounds for an Israeli cybersecurity startup and was establishing a new standard for DevSecOps and software supply chain security.[1][6][10]

Business model: OX Security provides a unified application and software supply chain security platform that secures software across the development lifecycle, integrating capabilities such as SBOM (Software Bill of Materials), PBOM (Pipeline Bill of Materials), CI/CD pipeline visibility, vulnerability scanning, and automated remediation to help enterprises prevent and mitigate software supply chain attacks.[1][7]

Year: 2022
Raised: $34M seed round announced in September 2022.[1][6][10]
Investors: Evolution Equity Partners, Team8, M12 (Microsoft’s venture fund), Rain Capital
Headquarters: Tel Aviv, Israel.[6][10]
Industry: Cybersecurity; software supply chain security / application security.[1][6][7][10][12]

Round: Seed (described as a seed funding round, despite being large and sometimes referred to as seed‑stage financing).*[1][6][10]

Lead investor: Evolution Equity Partners, Team8, and M12 are all described as leading the $34M seed round.[1][6][10]

Total funding: OX Security raised a $34M seed round announced in September 2022 and later a $60M Series B announced in May 2025, for at least $94M in disclosed funding.[1][6][8][10]

Use of funds as presented: Public commentary around the round emphasizes strengthening software supply chains, building out OX’s unified application and supply chain security platform, and scaling to meet rising demand for protection against supply chain attacks, though specific allocation between product, hiring, and go‑to‑market is not detailed.[1][6][10]

What happened after the OX Security deck

The 2022 seed‑stage deck supported a $34M financing round that helped OX Security establish itself in the software supply chain security market; in subsequent years the company expanded its platform, grew its customer base, raised a $60M Series B in 2025, and achieved recognition as a Leader in Gartner’s 2026 Magic Quadrant for Software Supply Chain Security.[1][3][4][6][8][10]

September 2022: Announced a $34M seed funding round led by Evolution Equity Partners, Team8, and M12, with participation
By late 2022, reported having around 30 customers including FICO, Kaltura, and Marqeta using its software supply chain s
Subsequently raised a $60M Series B round announced in May 2025, with a broader investor base including Cisco Investment
By 2026, recognized as a Leader in Gartner’s inaugural Magic Quadrant for Software Supply Chain Security, signaling stro

What the OX Security deck got right

Strong investor validation and sizable seed round. The deck was associated with a relatively large $34M seed round backed by Evolution Equity Partners, Team8, M12, and Rain Capital, providing strong external validation that the narrative and positioning resonated with sophisticated cybersecurity investors.[1][6][10]
Clear workflow framing of a complex problem. The Discover–Automate–Secure workflow gives investors a clear, structured mental model for how OX approaches software supply chain security, which simplifies a complex technical problem and makes the product strategy easier to understand.[1][12]
Compelling problem framing in a hot segment. By leveraging high‑profile software supply chain breaches and emphasizing the growing attack surface across modern development pipelines, the deck taps into a highly topical and urgent problem that investors were actively seeking exposure to.[1][7][11][12]
Platform ambition and category‑defining potential. OX’s broader positioning (as later articulated) around unified SBOM and PBOM, CI/CD visibility, and runtime context suggests that even at seed stage the company was aiming for a platform approach rather than a point solution, which is attractive for investors looking for category‑defining plays.[1][7][12]
Sophisticated understanding of supply chain threat landscape. Recognition that supply chain attacks can target products at any stage of the development lifecycle and that defense must extend beyond component scanning shows a sophisticated understanding of the threat model, which likely came through in the deck’s use of real‑world attack narratives.[1][11][12]
Strategic investor alignment and ecosystem credibility. The association with Microsoft’s venture fund M12 and other leading cybersecurity investors adds strategic credibility and suggests the deck successfully conveyed OX’s potential for deep ecosystem integrations and enterprise adoption.[1][6][10]

What could have been stronger

Limited visible product architecture and competitive detail. Public descriptions of OX’s capabilities emphasize a rich, integrated platform (SBOM, PBOM, CI/CD and runtime visibility), but the deck as described appears to focus more on the Discover–Automate–Secure workflow and macro threats than on clearly broken‑out product modules, architecture diagrams, or side‑by‑side comparisons with incumbent tools, which may leave some investors wanting more technical depth.[1][6][7][12]
Vision‑heavy, traction‑light story at a large seed size. The Business Insider excerpt notes heavy emphasis on workflow and high‑profile breaches; without specific metrics from 2022 (customer count, ARR, deployment footprint), the deck risks feeling more like a vision narrative than a traction story, which could be a drawback for some investors at a $34M seed size.[1]
Differentiation may not be fully crystallized in the deck. The deck’s framing leans on a generalized DevSecOps and supply chain security problem; since later materials emphasize unique concepts like PBOM and unified SBOM+runtime context, the absence of those concrete, differentiated constructs in the 2022 deck (at least as reported) suggests the differentiation may not have been articulated as crisply to investors then.[1][7][12]
Customer social proof underutilized in the available description. At seed stage, customers and early usage patterns are critical; TechCrunch later reports 30 customers including FICO, Kaltura, and Marqeta, but this traction is not described in the Business Insider excerpt about the deck, implying the deck either downplayed specific logos or they were not yet as prominent, which would weaken social proof compared with what later became available.[1]

How an investor would read this deck

What draws attention

OX Security is targeting a large and growing market: software supply chain and application security across modern CI/CD pipelines, a segment that has attracted significant investor interest because of prominent supply chain breaches and regulatory pressure.[1][6][7][10][12]
The company raised a relatively large $34M seed round led by reputable cybersecurity and enterprise investors (Evolution Equity Partners, Team8, M12, Rain Capital), which signals strong investor conviction but also raises expectations for rapid product and go‑to‑market maturation.[1][6][10]
OX’s narrative of Discover–Automate–Secure, combined with later concepts like PBOM, SBOM, and unified pipeline visibility, points to an attempt to define a new category or standard in software supply chain security, which investors will evaluate for defensibility and platform potential.[1][7][12]
Early recognition by investors and later by Gartner as a leader in software supply chain security suggests the problem and solution are credible, so investors will scrutinize execution risks: scaling ARR, deepening enterprise integrations, and maintaining technical edge.[3][4]

Risks that stand out

The $34M seed round size sets high expectations; if initial traction and ARR in 2022 were modest, there is risk that later rounds must be justified more on narrative than on strong revenue metrics, especially in a crowded DevSecOps and application security market.[1][6][10]
Software supply chain security is a competitive category with multiple vendors offering SBOM, CI/CD visibility, and pipeline security solutions; OX must continually differentiate its platform and PBOM approach to avoid commoditization and pricing pressure.[7][12]
OX’s value proposition depends on deep integration into developer workflows, CI/CD tools, and runtime environments; slow or complex integrations could hinder adoption and limit the speed with which enterprises realize value.[7][12]
Regulatory and standards‑driven demand for SBOM and supply chain security could evolve unpredictably; if mandates are delayed or fragmented, the pace of adoption for comprehensive platforms like OX may be slower than anticipated in the 2022 deck’s projections.[7][11]

Questions this deck invites

What specific capabilities and modules did the 2022 product include (e.g., SBOM generation, PBOM, CI/CD visibility, runtime context), and how did those compare feature‑by‑feature to incumbent DevSecOps and supply chain security tools at the
What were OX Security’s concrete traction metrics at the time of the $34M seed (number of paying customers, ARR, average deployment size, key lighthouse accounts), and how did those justify the round size and valuation relative to peers?[1]
How does OX technically implement PBOM and unified SBOM+runtime context, and what are the main architectural barriers that make this approach hard for competitors to copy?[7][12]
What is the long‑term go‑to‑market strategy for selling a unified application and supply chain security platform—direct enterprise sales, channel/partners, or OEM—and how did the 2022 deck model customer acquisition cost and sales cycles in
What are the main regulatory or compliance drivers (e.g., SBOM mandates, critical infrastructure requirements) that OX planned to leverage post‑2022 to accelerate adoption, and how was this reflected in the deck’s market sizing and growth a

What founders can take from the OX Security deck

A large seed round in cybersecurity can be successfully raised when a company frames itself as defining a new standard in a fast‑emerging risk category like software supply chain security and backs this with credible investor partners.[1][6][10]
Structuring the story around a simple workflow such as Discover–Automate–Secure makes a complex technical platform more accessible to generalist investors, but should be complemented with enough product detail to show real defensibility.[1][7][12]
Leveraging widely reported software supply chain breaches as proof points for the problem can create urgency in a pitch, especially when combined with a narrative about expanding attack surfaces in modern CI/CD environments.[1][7][11][12]
Bringing in strategic investors like Microsoft’s venture fund M12 at seed stage can signal strong ecosystem validation and may help a cybersecurity startup accelerate integrations and enterprise go‑to‑market.[1][6][10]
Even when a company’s long‑term differentiation is technical (e.g., PBOM, unified SBOM+runtime context), the initial deck may succeed by focusing more on the scale of the risk, the shortcomings of existing tools, and the clarity of the workflow, showing that narrative clarity can sometimes outweigh

OX Security pitch deck: common questions

What does OX Security do?

OX Security is a cybersecurity company that provides a unified application and software supply chain security platform, giving organizations visibility and control over the components, pipelines, and processes involved in building and deploying software so they can prevent and mitigate supply chain attacks.[1][7][12]

How much did OX Security raise in the round associated with this deck, and when?

In September 2022, OX Security announced a $34M seed funding round, one of the largest seed rounds for an Israeli startup, with investors including Evolution Equity Partners, Team8, Rain Capital, and M12, Microsoft’s venture fund.[1][6][10]

Who invested in OX Security’s 2022 funding round linked to this pitch deck?

The $34M seed round was led by Evolution Equity Partners, Team8, and M12, Microsoft’s venture fund, with participation from Rain Capital; Microsoft’s M12 publicly highlighted OX as pioneering a transformative standard for supply chain security.[1][6][10]

What problem is OX Security’s platform trying to solve?

OX Security focuses on securing the full software supply chain and application lifecycle, integrating SBOM and PBOM, CI/CD pipeline visibility, and runtime context to help AppSec and DevOps teams identify and remediate risks throughout development rather than only at deployment.[1][7][9][12]

What was the core value proposition in OX Security’s 2022 pitch deck?

Later sources note that OX Security’s platform combines unified visibility across code, builds, and runtime with automated workflows and remediation, allowing teams to focus on the small percentage of risks that matter, but the 2022 deck itself centered on a Discover–Automate–Secure workflow and the need for a new standard for software supply chain security.[1][7][12]