Pixee (pixee.ai) is an agentic application security platform founded by Arshan Dabirsiaghi (co-founder of Contrast Security) and Surag Patel (former CSO at Contrast). Its core function is to sit between vulnerability scanners and developer workflows: it ingests findings from SAST, SCA, and other security tools, removes false positives by tracing real execution paths, and automatically generates pull requests containing code fixes. The platform combines two fix mechanisms. First, 120+ deterministic codemods built on the open-source Codemodder framework handle well-understood, repeatable vulnerability classes (SQL injection, XXE, insecure deserialization, path traversal, etc.) across Java, Python, JavaScript/TypeScript, C#, and Go. Second, AI-powered 'MagicMods' handle complex, context-dependent issues where a deterministic rule is insufficient. This hybrid approach produces fixes that are explainable and auditable rather than opaque LLM suggestions. Pixee integrates directly into GitHub, GitLab, and Azure DevOps as an app. Once installed, it scans repositories, triages findings to eliminate up to 98% of false positives, and opens pull requests with fixes developers can review and merge. The company reports a 76% developer merge rate, a 91% reduction in remediation time for enterprise users, and a 74% reduction in triage time. In May 2025 Pixee raised a $15 million seed round co-led by Decibel and Wing VC, with participation from TEDCO, PrimeSet, and strategic angels including early GitHub engineer Zach Holman and HackerOne CTO Alex Rice. The company also won two Cyber UXcellence Awards at Black Hat USA 2025. Pricing is contributor-based (per active committer in the last 90 days) rather than per seat, and specific tier prices are not publicly listed. Key features: - 120+ deterministic codemods for repeatable vulnerability classes (SQLi, XXE, path traversal, insecure deserialization) - AI-powered MagicMods for complex, context-specific security fixes - False-positive triage that traces real execution paths, removing up to 98% of false positives before fix generation - Automated pull request creation in GitHub, GitLab, and Azure DevOps - Support for Java, Python, JavaScript/TypeScript, C#, and Go - Open-source Codemodder framework underpinning all deterministic fixes - Contributor-based pricing model (not per seat) - 76% reported developer merge rate on auto-generated fixes
Contributor-based (per active committer in the last 90 days); specific tier prices not publicly listed. Enterprise pricing available on request.