Pixee
Pixee attacks the part of AppSec that stayed manual - triage and fixing - and charges on findings volume rather than seats, so onboarding more developers does not raise the bill. Being built by the people who ran Contrast Security shows in the workflow design. The friction is commercial: no published price, no free tier, no self-serve way to try it on your own repository.
Pros
- Charges on findings volume, so adding developers does not raise the bill
- Delivers fixes as reviewable pull requests, not as advisory tickets
- Filters exploitable findings out of scanner output instead of forwarding the whole backlog
- Design-time review catches issues before the code exists, not only after
Cons
- No published price at all - every engagement starts with a sales call
- No free tier or self-serve trial to test against your own repository
- Depends on you already owning SAST and SCA scanners
- The company publishes no founding year or headcount