What Pixee is
Pixee creates pull request ready fixes for SAST findings for enterprises. They've especially focused on developer workflows and using a mix of LLMs with static rules to create fixes. The vendor site is pixee.ai. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Pixee covers
Pixee is in the catalog for these capabilities. Categories: AI Security and SAST. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate Pixee in a security program
Use Pixee as a stack candidate, not as diligence evidence. The oneNorma score for Pixee is 4/10 (percentile 15). If the real gap is in AI Security and SAST, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what pixee.ai publishes. Contrast it with pentesting and Security Cloud & Compliance.