Supported Languages and Frameworks

The following is the overview of supported languages across different OX Security categories:

• Code security

• Open Source Security & SBOM

• API BOM

• Infrastructure

Code Security Support

OX supports static code analysis for the following programming languages.

Language	Code Scanning	AI Fix Support
Python	Yes	Yes
JavaScript / TypeScript	Yes	Yes
Java	Yes	Yes
C#	Yes	Yes
PHP	Yes	No
Swift	Yes	No
Go	Yes	No
Rust	Yes	No
Dart	Yes	No
Ruby	Yes	No
C / C++	Yes	No
Scala	Yes	No
Kotlin	Yes	No

SCA & SBOM Support

OX supports Software Composition Analysis (SCA) and Software Bill of Materials (SBOM) generation for the following package manager files.

Language	Package Manager	License Scanning	Vulnerability Scan	Dependency Graph	Reachability Analysis	Pull Request Fix	Private Dependency Scanning	Dependency Confusion	Deprecated Dependencies	Malicious Dependencies
JavaScript	npm	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
	yarn	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes	Yes
	pnpm	Yes	Yes	Yes	Yes	Yes	Yes	No	Yes	Yes
Python	pip	Yes	Yes	Yes	Yes	Yes	No	Yes	No	Yes
	Poetry	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes
	Pipenv	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes
	uv	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes
Java	Maven	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes
	Gradle	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes
Scala	SBT	Yes	Yes	Yes	No	No	No	No	No	Yes
	Maven	Yes	Yes	Yes	No	Yes	Yes	No	No	Yes
	Gradle	Yes	Yes	Yes	No	Yes	Yes	No	No	Yes
Kotlin	Maven	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes
	Gradle	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes
Objective-C / Swift	CocoaPods	Yes	Yes	Yes	No	No	No	No	No	No
	SwiftPM	Yes	Yes	Yes	Yes	Yes	No	No	No	No
	XcodeGen	Yes	Yes	Yes	Yes	Yes	No	No	No	No
Go	Go Modules	Yes	Yes	Yes	Yes	Yes	No	No	No	Yes
Dart	Dart	Yes	Yes	Yes	Yes
Rust	Rust	Yes	Yes	Yes	Yes
Ruby	RubyGems	Yes	Yes	Yes	No	No	No	No	No	Yes
C#	NuGet	Yes	Yes	Yes	Yes	Yes	Yes	No	No	Yes

API BOM Support

OX supports API analysis and detection for specific specifications and frameworks.

Language	Web framework	API detection	API/Issue correlation¹
OpenAPI specification file	—	Yes	N/A
Python	Flask	Yes	Yes
	FastAPI	Yes	Yes
	Django	Yes	Yes
	Connexion	Yes	Yes
JavaScript & TypeScript	Express.js	Yes	Yes
	NestJS	Yes	Yes
	Koa	Yes	Yes
	Apollo GraphQL	Yes	Yes
Java	SpringBoot	Yes	Yes
Go	Gin	Yes	N/A
Scala	Play	Yes	Yes
	SpringBoot	Yes	Yes
Kotlin	SpringBoot	Yes	Yes
	Ktor	Yes	Yes
C#	Microsoft ASP.NET Core MVC	Yes	Yes

Infrastructure as Code Support

OX detects and supports IaC tools and deployment configurations for the following platforms.

Tool	Supported Deployments
Terraform	Alibaba, AWS, GCP, Azure, Yandex, OpenStack
Argo Workflows	Kubernetes
CloudFormation	AWS
Dockerfile	Any
Kubernetes	Any