OX Scan Engines

OX Scan Engines analyze different areas of your software development environment to identify security risks, vulnerabilities, and configuration issues across the software supply chain.

Each scan engine focuses on a specific security domain, such as application code, secrets and sensitive data, open source dependencies, infrastructure as code, source control configuration, or CI/CD security.

Rather than treating these areas as isolated security checks, OX combines findings from its scan engines with context collected across your development environment. This context helps OX understand relationships between applications, code, dependencies, infrastructure, and development processes, and determine the potential impact of identified issues.

Scan engine findings are evaluated according to OX policies and enriched with contextual information to help prioritize the issues that require attention.

Use the pages in this section to learn more about the different OX scan engines, what each engine analyzes, and the security issues it can identify.