Latest news with #Pixee
Technical.ly
01-07-2025
- Business
- Technical.ly
Maryland started taxing tech services. Here's what you need to know.
Surag Patel started building a cybersecurity company in Baltimore in 2022. But a new tax starting today on technology services has him second-guessing the startup's headquarters. The founder of Pixee, Patel last May announced a $15 million investment to expand staff and open an office. He's concerned, though, about Maryland's new 3% 'tech tax' on IT, data and software publishing services. It could take up to two months of a full-time hire's job to figure out compliance, Patel believes, and might limit his company's growth. There are no specific plans or states in mind to move to as of now, per Patel. TEDCO, Maryland's investment vehicle and investor in the startup, requires Pixee to stay in the state for a certain period of time and hire a percentage of workers within its borders. TECH TAX FACTS How does the tax work? The law outlines certain codes in the North American Industry Classification System (NAICS) to be taxed. That includes sectors 518 or 519, subsector 5415, and a system software or application software publishing services described under NAICS subsector 5132. The law cites the 2022 edition of the NAICS. It will continue to do so even when the NAICS gets updated in the coming years, unless legislatures change the law, per a Comptroller of Maryland official. When does the tax apply? If a company in Maryland sells to a buyer in the state. If an out-of-state seller with a physical presence in Maryland (like an employee installing cable or running a data center in the state, for example) is selling to a Maryland buyer. A seller with no ties to Maryland vending to an in-state buyer must collect the tax if, during the previous or current calendar year, the gross revenue of sales exceeds $100,000 or if over 200 individual sales take place in Maryland. Maryland sellers vending outside of the state do not need to charge the tax. Remittances to the government are required. Businesses need to file a sales and use tax return and remit payment of the tax collected on or before the 20th of the month following the end of the period when the sale takes place. Depending on the sale, the state may assign either a monthly or quarterly filing frequency. Vendors can get credit for remitting to the state on time, per a Comptroller official — 0.9% of the gross amount of tax remitted valued up to $500 per return. What's exempt from this tax? Sales of cloud computing to cybersecurity businesses Certain businesses in the University of Maryland Discovery District (the Governor's Office did not clarify why these companies are exempt) Governments, nonprofits and charitable organizations Software as a service, or SaaS, is already taxed at 6% when sold to an individual. But an enterprise system, previously not taxed, is now taxed at 3%. What is a Multiple Points of Use Certificate? This certificate applies if purchased services are also used outside the state. The Comptroller official gave an example to explain: Let's say a Maryland-headquartered company is buying software for staff across the globe. The buyer can file a certificate so the vendor doesn't collect the tax for the IT outside of the state. 'It's enough for us to think about,' Patel told 'Maybe the idea of building and doing everything in Maryland and Baltimore is not the idea.' The tax on certain tech services went into effect on July 1, thanks to Gov. Wes Moore's late May signature on the bill that accompanies the state's main budget. The tax is projected to bring in $482 million, per a committee report. Plans to purchase new accounting software, hire help Patel, cofounder of Pixee, isn't the only person scrambling to comply. Darren Clark, the Pennsylvania-based founder of Clark Computer Services and Clark Building Technologies in Frederick and Halethorpe, said he needs new financial software to handle processing two separate taxes because of this new law. His current plan cannot file multiple tax rates for one transaction, he said. He considered keeping the same financial software and having employees file two separate invoices manually. But he quickly learned that it'll take up half a workday for someone to keep track of and file everything. Clark estimates prices for this platform will spike. His current plan costs $500 a month, and his research suggests this new plan will be at least $6,000, he said. Finding the right software, training employees and migrating data all also takes time. Clark anticipates it'll take him six months to get everything organized and running. All of this will cause his costs to go up, he said. That means fewer raises and bonuses for his staff of 40, who mostly live in Maryland. '[The government is] worried about collecting every penny they can from us so they could pay for their budget deficit,' Clark told 'They're solving this problem by making it harder for all their constituents.' Confusion as to what's taxed, how processes will work Because he's pivoting operations to comply, Clark wants a six-month grace period enacted so he and others can be more prepared. Mistakes may be made on his part because there's so much to learn and adjust. Relying on NAICS to pinpoint what's taxed also confuses Clark. He said he's 85% sure of what's taxed and what's not, because the codes are so broad. 'Six months would allow me time to get my act together so that we don't make those mistakes, or, better yet, get into a system that automates everything so I don't have to worry about it at all,' he said. Kelly Schulz, the CEO of the trade association Maryland Tech Council, noted that several members she works with lack clarity on how the tax works. 'There's still a general layer of some confusion as to how to go through the implementation,' Schulz, Maryland's former Secretary of Commerce and Labor, told This law is in the state's Budget Reconciliation and Financing Act, which was passed alongside the main budget package, she explained. Individual items in this legislation do not have hearings, which Schulz believes contributes to the confusion. There was some conversation about the tax during a committee hearing, but lawmakers didn't get into specifics, she said. The tax also came with emergency regulations, filed by the Comptroller, so companies can immediately comply. This left no time for public comment after the legislative session, she said. Schulz believes the funds from this tax are part of the revenue that the government is counting on for the fiscal year starting today, July 1. Essentially, it's been enacted so soon so the budget gets balanced, she said. The Governor's Office did not confirm this reasoning. The Comptroller of Maryland reached out to Schulz to invite tech companies to answer questions, which she appreciated. 'I think that they realize that this may be hard,' Schulz said, 'and they want to be able to be supportive of the industries.' Tech companies brace for less growth and higher costs Clark's businesses have been growing 34% on average for the last 10 years per year. This is the first year he's planning without growth, and he blames the tax and the government. He's in the process of a cost reduction exercise to make sure he stays afloat. 'I feel like our politicians have let all of us down,' he said. 'Both sides really are taking advantage of us, and they're really after their own agenda — not for us.' Clark is concerned about other ramifications, including getting outbid by tech companies outside of Maryland. He cited the provision where out-of-state companies only have to tax the services when the gross revenue of sales exceeds $100,000 or if there are more than 200 individual sales in Maryland. Firms could do one job in Maryland per year, which would skirt the tax, he said. Founders are also bracing for higher costs of the tech they purchase. Todd Marks, the founder of the software company Mindgrub, is building a new headquarters in Baltimore's Pigtown neighborhood. That's an expensive endeavor that involves purchasing a ton of tech, including cabling and software. 'This tax is just a punch in the face when you're already down,' Marks told He noted this tax will be felt outside the tech sector. For example, he needs to purchase point-of-service systems for Mindpub, his restaurant near Mindgrub's offices on Fort Ave. Tax could cause business departures Marks also sits on the IT advisory board for the Comptroller of Maryland, but hasn't been active after the first couple of meetings, he said. Even with that connection to the agency enacting this tax, he, along with Pixee's Patel, is considering moving Mindgrub out of the state because of the tax. He's looking at Wyoming, Tennessee, Florida and Texas as options. Tech companies are nimble, he said, and can easily move to a different state because customer bases and supply chains are mostly digital. He's betting Maryland will lose businesses. 'We tax everything six ways to Sunday,' Marks said. Clark, founder of Clark Computer Services and Clark Building Technologies, is not going to leave Maryland because all of his customers live here anyway. He would still need to charge the tax because of that. 'There's really no maneuvering,' Clark said. 'I've spent plenty of time trying to figure out how to get out of it. The only way I can get out of it is to commit tax fraud, which I'm not going to do.' This isn't 'the end of the world' for businesses, per Maryland Tech Council's Schulz, but it will be harder to be a business owner. Maryland still has qualities that make it an attractive place to headquarter a business, including proximity to the federal government. 'I certainly don't think something like this has helped the industry want to really grow and expand here,' Schulz said. 'I'm hoping that it's maybe it's temporary, because I think we have so many resources and assets for them without this being a barrier.'
Technical.ly
05-06-2025
- Business
- Technical.ly
Baltimore weekly roundup: A $15M local cyber seed; legal pitfalls; Johns Hopkins' hiring freeze
This week's newsletter features news on an eight-figure seed round for Pixee, a cyber company whose tech not only finds code vulnerabilities, but fixes them, too. Plus, several local founders shared their advice on legal strategies and pitfalls for startups during a panel at our 2025 Builders Conference. Scroll down for more news from throughout the Baltimore region. 📰 News Incubator: What to know • The Economic Development Administration rescinded six of the recent awards it granted to previously designated Tech Hubs earlier this year. Commerce plans to open applications for another funding round this summer and announce awardees in 2026, putting Baltimore back in the running for millions. [ • Johns Hopkins is pausing raises and freezing hiring as federal cuts continue. The university already announced it would lay off 2,000 employees. [Baltimore Biz Journal] • Meta is relying on Baltimore's Constellation Energy to secure nuclear power for fueling AI developments and data centers. [Baltimore Banner] • Harper's Choice Middle School in Columbia has a new STEM center thanks to the Cal Ripken Sr. Foundation and the state. The philanthropic org, named after the Orioles player, has set up these centers across the country. [CBS/ • Baltimore City has an RFP open for internet service providers to deliver affordable services in public housing units. [BCIT] • Columbia cyber firm Tenable is acquiring Apex Security. The firm has been busy: Leadership announced the purchase of an Israeli firm earlier this year for $147 million in cash and $3 million in restricted stock units. Tenable also recently announced a new office opening in Tel Aviv and hired a chief product officer. [Tenable/ • Check out how to best deliver your startup pitch, among other lessons from founders and investors. [ • Maryland's AG is suing Trump over attempts to cut National Science Foundation programs. [AG Brown] 🗓️ On the Calendar • Partner event: Learn about the ways innovation, tech and outer space intersect on June 24 at the World Trade Center Institute's next AGILE Global Innovation Series event. [ Details here ] • Techstars showcases its AI Health accelerator cohort at a demo day in the Ravens' stadium on June 5. [ Details here ] • Network with local business owners and celebrate the nonprofit LET'S GO's new offices on June 5. [ Details here ] • Test out the latest in local video games during Indie Game Fest on June 7 at Enoch Pratt Free Library. [ Details here ] • Hear from CEO Chris Wink and leaders in Pittsburgh on June 11 about how elected officials and civil servants can improve local operations. [ Details here ] • Listen to how entrepreneurs have overcome different challenges on June 11 at an event hosted by EO Baltimore. [ Details here ] • Watch demos from local technologists on June 14 at the next Baltimore Code and Coffee. [ Details here ] • Local tech orgs are hosting a cookout on June 28 at Wonderground Park. []
Technical.ly
04-06-2025
- Business
- Technical.ly
Cyber startup raises $15M to open Baltimore office and expand sales team
With cyberattacks on the rise in the US, a startup with bicoastal founders automating the process of protecting systems has raised millions to reach more customers. Pixee, founded in 2022, announced a $15 million seed round in May. Its tech addresses a gap in the broader market for cybersecurity products: Many tools exist to automate the search for vulnerabilities, but not to fix those flaws, explained Pixee cofounder and CEO Surag Patel. Right now, firms largely handle that process manually. Pixee uses agentic AI to make sure what's flagged is an issue in the code, and automates repairing the code to avoid attacks, he said. Software is being created faster than ever before, thanks to generative AI tools — which Patel, who lives in San Francisco, sees as a positive. But with that increase in software comes more technology susceptible to attacks, whether it's developed by a bot or a human. Pixee's announcement of the raise pointed to a 2024 study, conducted by the market intelligence-focused International Data Corporation with sponsorship by the software company JFrog, that showed that developers are also spending more hours on application security than in previous years. 'This boom of code — with that comes vulnerabilities,' Patel told 'That's an inevitable reality. And what we need is we need automation to automate the fixing of those vulnerabilities.' Growing Baltimore roots with funds from Silicon Valley This is Pixee's first raise, and it was led by Decibel and Wing VC in Palo Alto, with participation from Maryland's venture arm TEDCO and PrimeSet in Dallas. TEDCO contributed $1.5 million to the round. Patel and his cofounder, Baltimore-based Arshan Dabirsiaghi, will be using the funds to expand Pixee's go-to-market team. Up until now, they've primarily focused on hiring engineers, many of whom live in the Baltimore region. The company recently hired its first sales staffer, per Patel. 'The going-forward plan is: We need to start scaling up the awareness of Pixee,' he said. Engineers will still be brought on, Patel said, and he hopes to hire 10 employees to join the current staff of about 20 by the end of 2025. The startup is also looking at opening a formal office in the Baltimore area, though the staff currently gets together once a quarter for about a week to work in person. The founders have been raising capital since shortly after they were founded, per Patel, and it's been a 'quiet' process. The founders reached out to a handful of known investors through previous work. 'For us, we've been so heads-down just building a product, proving out the product and the market, the opportunity,' Patel said, 'and then focusing on the seed funding as secondary, honestly.' Dabirsiaghi is the cofounder of Baltimore's Contrast Security, which automates identifying vulnerabilities in software. The duo met when Patel joined that cybersecurity firm as its chief strategy officer. Saving developers time to innovate The startup self-reports a 76% acceptance rate of changes using the Pixee product. About 30,000 projects are using the firm's open source software, per Patel. He declined to share how many paying customers Pixee has, but noted he sells the product to large companies with around 300 or more developers. Pixee doesn't focus on a specific industry, but regulated ones in sectors like finance, medicine and the government have shown a lot of interest. Pixee is in talks with the federal government about contracting services, but Patel declined to share which agencies. Partnerships are also a core part of Pixee's model, and the company recently announced one with HCLTech to get connected with more customers. By getting connected to more customers, Patel wants this tool to save effort for developers so they can focus on important things outside of cybersecurity concerns. 'Now they can re-spend that time on the stuff they want to spend it on, which is generally not security, right?' Patel said. 'They want to be building cool features for customers, and things that might drive business or ideas.'
Business Wire
22-05-2025
- Business
- Business Wire
Pixee Raises $15M to Automate Code Security to Meet the Velocity of GenAI-Enabled Developers
BALTIMORE--(BUSINESS WIRE)-- Pixee, the creator of innovative solutions that empower security teams to match the productivity of AI-powered development, announced today that it has raised $15M in seed funding. The round was led by Decibel and Wing VC, with participation from TEDCO, PrimeSet and strategic investors, including early GitHub engineer Zach Holman, HackerOne Founder and CTO Alex Rice, Oracle SVP of Cloud Operations Brian Chess, and more. The new capital will accelerate Pixee's product development and expansion of the go-to-market team, enabling the company to scale adoption among enterprises and capture the growing demand for its AI-powered solution. Early enterprise customers have seen substantial benefits from adopting Pixee, including recapturing 91% of developer remediation time and cutting security triage time by 74%. Automated code fixes achieve an impressive 76% merge rate. Pixee is the first enterprise-grade tool that uses agentic AI for context and logic alongside deterministic techniques, delivering both intelligent vulnerability triage and accurate, trusted fixes. It integrates directly into developer workflows, including GitHub, GitLab, Bitbucket, and Azure DevOps, creating pull requests with ready-to-accept code. Purpose-built for security-conscious enterprises, the on-premises deployment option keeps customers' sensitive data, intellectual property, and source code fully under the customer's control. This eliminates the risk of data leaks or exposure to unregulated AI tools, ensuring strong trust, security, and protection. 'Developers are more prolific today than ever before, especially those leveraging the latest genAI tools like Cursor, Claude Code & GitHub Co-pilot,' said Surag Patel, co-founder and CEO of Pixee. 'It's time application security teams are empowered with a platform that enables them to 10X their team and keep pace with their counterparts. By focusing on capabilities like automated, production-ready code fixes directly into developer workflows and automating expert automated triage for security, enterprises can now ship secure code at unprecedented velocity. Teams can trust that any vulnerabilities within code are being resolved faster than new ones can be introduced.' IDC projects that by 2027, 70% of corrective code fixes for application security issues will be generated by AI-assisted automated remediation tools, reducing the time to patch vulnerabilities to just days. The report also found that developers estimate spending 19% of their weekly hours on security-related tasks, often outside normal working hours. The average organization spends a whopping $28,100 per developer each year in security-related tasks. 'It's time Application Security teams have their 'Cursor' equivalent platform. Pixee is the first platform we've seen that truly changes the equation in security programs and enables them to keep up with the pace of developers. By natively weaving into the developer workflow and automating work that previously was a tax on developers and security teams, security gets done automatically. Instead of the same story of understaffed product security teams, we finally have a path to the enterprise dream,' said Dan Nguyen-Huu, Partner at Decibel. 'At the heart of Pixee is a powerful insight: genAI-fueled developer productivity and security can coexist without friction. By automating the complex tasks of resolving issues from product security scanners, Pixee allows developers and security teams to reclaim valuable time, driving innovation and delivering higher quality software, faster,' added Jake Flomenberg, Partner at Wing. Pixee was founded by industry veterans with decades of experience in security and developer enablement. Co-founder and CEO Surag Patel was the Chief Strategy Officer at Contrast Security, and held leadership roles at 41st Parameter (acquired by Experian), comScore, and InMobi. Co-founder and CTO Arshan Dabirsiaghi co-founded cybersecurity unicorn Contrast Security and is recognized as one of the world's most prominent application security experts. Together, they are building Pixee to redefine how security is managed in the development process. About Pixee, Inc. Pixee is the first enterprise-grade platform that automates the last mile of application security, from alerts to resolution. The company's technology integrates directly into developer workflows, using a combination of agentic AI and deterministic techniques to deliver trusted, automatic code fixes with an 87% merge rate. Founded by security industry veterans Surag Patel and Arshan Dabirsiaghi, Pixee is backed by Decibel, Wing VC, and strategic investors including early GitHub engineer Zach Holman and HackerOne Founder Alex Rice. For more information, visit
