Pixee

Pixee automates the ‘last mile’ of application security remediation: taking findings from SAST, SCA, and other scanning tools, triaging which ones actually matter, and generating production-ready code fixes delivered as pull requests directly into a developer’s existing GitHub, GitLab, or Azure DevOps workflow. The premise is that most AppSec programs are bottlenecked not by finding vulnerabilities but by getting developers to actually fix them, and that bottleneck is getting worse as AI coding assistants let developers ship code faster than security teams can review it.

Founded in 2022 by Arshan Dabirsiaghi and Surag Patel, both security-industry veterans from Contrast Security, Pixee is headquartered in Baltimore, Maryland. The company raised $15 million in seed funding in May 2025 led by Decibel and Wing VC, with participation from TEDCO and PrimeSet, bringing total funding to $30 million, and has grown to roughly 30 employees.

Pixee’s specific bet — automated, context-aware code remediation rather than just detection — is a genuinely different value proposition than most application security tooling, which stops at finding and prioritizing issues and leaves the fix to developers. As a young, recently-seed-funded company, it does not yet have the multi-year track record or large enterprise reference base that more established AppSec vendors can point to, so its remediation accuracy at scale is still largely unproven outside vendor-reported claims.