Problem

Enterprise AI adoption is outpacing governance. Companies may have dozens of sanctioned and unsanctioned AI tools but little visibility into what employees use, what it costs, or where sensitive information goes. The resulting pain spans security, finance, IT, and compliance: AI spend is scattered across teams and cost centers, while CISOs and CFOs cannot reliably answer which tools are in use or how much the organization is spending. Oximy illustrates the economic case with a growth-stage company that found teams collectively spending more than $80,000 a year on overlapping AI image-generation tools.

The killer use case is preventing harmful “shadow AI” activity before it becomes a breach, regulatory violation, or uncontrolled cost. In Oximy’s example, a healthcare customer detected an employee uploading patient records to an unapproved AI transcription service within 48 hours, enabling intervention and avoiding a potential HIPAA violation. A financial-services customer likewise discovered 63 AI tools where it believed only 15 approved tools existed.

Product / Service

Oximy is an enterprise AI visibility, governance, and optimization platform that sits on the organization’s network rather than requiring endpoint agents, individual vendor integrations, or SDK changes. Its Discovery, Spend Intelligence, and Data Protection capabilities automatically identify AI tools and accounts, consolidate spending, monitor data flows, and let administrators set policies, issue alerts, and block sensitive data from reaching unauthorized tools. The company’s website says its visibility product can map AI usage without an SDK or code change, with sign-in, SIEM, and firewall connectors.

The broader platform has three connected products: Visibility creates a live map of AI tools, accounts, models, spend, adoption, and risk; Sidekick gives employees a company-owned workspace for collaborative work with people and agents; and Relay routes requests to the model that best balances quality, cost, latency, and policy. Customers can use their own provider accounts and keys, while Relay offers a free starting tier, usage-based token pricing, and custom enterprise contracts. The benefit is a single control layer that helps companies see and govern AI, centralize work, and reduce model and software costs without locking them into one model provider.

Market

Oximy competes in the emerging enterprise AI management market, spanning AI usage visibility, shadow-AI security, AI governance, spend management, and model-routing infrastructure. Its positioning is deliberately broader than a conventional CASB, DLP product, or SaaS-spend tool: Oximy argues that those categories provide separate partial views, whereas its platform connects discovery, spend, data protection, adoption, and routing. The competitive set therefore includes adjacent security and SaaS-management vendors such as Netskope and other CASB providers, as well as AI-security and governance startups; a third-party comparison specifically names Lasso Security, Astrix Security, Cyberhaven, DoControl, Nightfall AI, Zylo, and Productiv as competitors or overlapping alternatives.

Oximy appears to be an early commercial, seed-stage company rather than a mature scaled vendor. It was founded in 2025, is listed as an active Y Combinator Winter 2026 company, and the company says it is working with enterprises in financial services, healthcare, and growth-stage technology while processing millions of requests daily across thousands of AI tools. Its site also advertises 5,187 AI tools catalogued, a first live map in under 24 hours, and zero SDKs to install. Public evidence confirms YC backing and enterprise activity but does not disclose revenue, ARR, or customer counts, so it is not possible to label Oximy definitively as pre-revenue.