oxen.tech

What It Is

OXEN Technology provides a suite of managed cybersecurity and IT security operations services, covering Assure Bundle, Managed CTEM, Zero Trust Bundle, Managed Firewall, Managed Security Awareness Training, and Managed Backup. It is positioned not as a single security tool, but as an MSSP/MXDR-style service involving engineers, SOC teams, and consultants.

Core Capabilities

In terms of protection coverage, OXEN spans governance, detection and response, exposure validation, perimeter defense, human-risk reduction, and data recovery. CTEM emphasizes continuous validation rather than annual penetration testing. It uses autonomous attack simulation to identify real attack paths, ranks risks by exploitability, and provides technical reports, executive summaries, segmented analysis, and remediation roadmaps. Assure Bundle adds vCISO support, including dedicated monthly security leadership time, an annual CIS risk assessment, policy maintenance, incident response planning, and compliance guidance.

Zero Trust Bundle includes LAN policy enforcement for Windows endpoints, Todyl MXDR, a 24x7x365 SOC, email filtering, cloud identity MFA, and system/network monitoring. A key highlight is engineer involvement within 30 minutes after a critical alert is triggered, plus pre-approved after-hours investigation time of up to two hours. Managed Firewall covers monitoring, patching, configuration, IPS, Geo-IP and content filtering for SonicWall and Fortinet devices, along with quarterly external vulnerability testing.

Pricing and Service Boundaries

No specific public pricing is provided. Firewall service is charged monthly per device; security awareness training is billed per user; backup is priced by endpoint or server, and varies depending on cloud-only vs. local-plus-cloud deployment, storage capacity, and retention period. CTEM does not include actual remediation, physical security testing, or manual penetration testing. For firewall service, SSL deep inspection, high availability, and application control are add-ons. The basic backup service does not cover full-system disaster recovery.

Pros, Cons, and Best Fit

Strengths include a broad service portfolio, relatively clear managed-service responsibilities, and strong reporting and retesting mechanisms. It is suitable for organizations that lack a dedicated CISO or security operations team but need continuous validation and compliance support. Limitations include insufficient pricing transparency, no disclosed compliance certification details, a Zero Trust LAN model mainly focused on Windows endpoints, and the need to assess scope first in complex environments.

Access from China

The source text does not provide information on access from China, payment methods, or local support, so china_access can only be assessed as unknown. For Chinese companies considering procurement, key items to verify include cross-border access, SOC communication time zones, contract and payment arrangements, data export requirements, and local compliance obligations. Alternatives may include domestic MSSPs, managed SOC providers, MLPS compliance consulting, and local penetration testing vendors.