What Oxeye is
Acquired by Gitlab, Oxeye was a complete ASPM scanner that emphasized runtime context and API discovery The vendor site is www.oxeye.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Oxeye covers
Oxeye is in the catalog for these capabilities. Categories: ASPM, DAST, SAST, SCA, and Secret Scanning. Catalog tags: Acquired.
How to evaluate Oxeye in a security program
Use Oxeye as a stack candidate, not as diligence evidence. The oneNorma score for Oxeye is 4.8/10 (percentile 34). If the real gap is in ASPM, DAST, SAST, SCA, and Secret Scanning, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.oxeye.io publishes. Contrast it with pentesting and Security Cloud & Compliance.