Pixee

Pixee sells an application security platform that works downstream of existing detection tools rather than acting as a scanner itself. It ingests findings from SAST, SCA and DAST tools, performs exploitability analysis to determine whether a reported vulnerability is actually reachable and triggerable in the codebase, and then generates code fixes that are delivered as standard pull requests in the customer's source control system. The company describes two co-equal capabilities: triage automation, which it states reduces false positives by up to 98% and attaches a structured justification with code evidence to each verdict, and remediation automation, which produces context-aware fixes that are reviewed and merged through normal developer workflows.

The product installs via a GitHub App or a source control access token for GitLab, Bitbucket or Azure DevOps, and requires at least one connected scanner to operate. Pixee integrates natively with scanners including CodeQL, Semgrep, Checkmarx, Veracode, Snyk Code, SonarQube, AppScan, Polaris, Fortify, Contrast, GitLab SAST, GitLab SCA and Trivy, and can also consume any SARIF-producing scanner via the SCM code-scanning API. For large estates, findings are prioritized by severity and pull request creation is batched, with a PIXEE.yaml configuration file used to scope remediation to specific severities, vulnerability types or repository paths. The company also markets a design-time capability, Foresight, intended to identify risk in designs before code is generated, alongside its VulnOps triage and fix workflow.

Founding story

Pixee was founded by former Contrast Security founders and leaders who observed application security teams struggling with growing vulnerability backlogs. Arshan Dabirsiaghi co-founded Contrast Security and Surag Patel served as its Chief Strategy Officer; the pair concluded that the unaddressed layer in application security was resolution rather than detection, and founded Pixee in 2023.

Business model

Pixee sells an enterprise software platform to security and development organizations, deployed as an integration into customers' source control and scanner tooling. It offers enterprise deployment options including self-hosted, air-gapped and bring-your-own-model configurations, and an on-premises option that keeps customer source code and data under customer control.

Traction

The company reports a 76% merge rate on Pixee-generated fixes across production deployments, up to 98% false positive reduction, and more than 5,200 vulnerability backlogs cleared. Press coverage of the seed round cited early enterprise customers recapturing 91% of developer remediation time and cutting security triage time by 74%. The company states it cleared 5,000+ vulnerability backlogs at enterprise customers in under 90 days in 2025.

Latest developments

In May 2025 Pixee announced a $15M seed round led by Decibel and Wing VC with participation from TEDCO, PrimeSet and angel investors. The company promotes a 2026 DEVIES Award for AppSecOps Excellence and markets a design-time review capability, Foresight, in addition to its VulnOps triage and remediation workflow.