Pixee

About

Pixee evolved from a GitHub bot that opened hardening PRs into an agentic security-engineering platform aimed at the false-positive swamp that consumes AppSec teams. Its agents ingest findings from SAST and SCA scanners, trace execution paths to establish which vulnerabilities are actually reachable — claiming elimination of 98% of false positives — and produce convention-aware fixes as ready-to-merge pull requests, with a reported 76% developer merge rate and thousands of backlogged findings cleared. A second product, Foresight, moves upstream to threat-model designs before code is generated, aimed at catching vulnerabilities in AI-written code at the prompt stage. Both products draw on a Context Graph that compounds organizational security knowledge across engagements. Named enterprise customers include Oracle, NTT Data, and Olympus, and the platform won a 2026 DEVIES award. Its buyers are security engineering teams drowning in scanner output rather than individual developers.