Acquisition Opportunity GitLab acquired Oxeye for 35M to bolster SAST in DevSecOps workflow, indicating a strategic push for integrated application security across CI/CD. This presents an opportunity to upsell security tooling and services that align with GitLab’s DevSecOps roadmap and could target their extended security programs or enterprise customers adopting GitLab.

Cloud Native Focus Oxeye’s positioning as a cloud-native application security testing platform and its early emphasis on CNAST suggests demand for scalable security solutions in dynamic cloud environments. Sales outreach can target customers migrating to or operating on Kubernetes, Docker, and multi-cloud stacks who need risk-based prioritization and continuous monitoring.

Risk Prioritization Oxeye emphasizes transforming vulnerability focus into comprehensive risk determination and prioritization. This aligns with buyers seeking ROI from security spend, enabling conversations around asset risk scoring, SBOM-centric compliance, and integration into existing AppSec workflows to reduce mean time to remediation.

Tech Stack Fit With deployments on Databricks, AWS, Azure, GCP equivalents, Ansible, Chef Infra, Kubernetes, Docker, and Snowflake, Oxeye serves customers with modern, multi-tool ecosystems. This provides a cross-sell path to security tooling, cloud security posture management, and infrastructure as code security integrations.

Growth & Funding Early seed funding of 5.3M and subsequent product expansions (CNAST, Jira integration) signal a growth trajectory and willingness to partner. Target mid-market to enterprise teams expanding AppSec programs, highlighting potential partnerships or channel opportunities around Jira integration, security compliance, and scalable CSP engagements.