
Conviso Platform
7.3#4 in application security orchestration platformsFrom $19 a monthFree planWebAPI
Visit

| Fact | Conviso Platform | Phoenix Security |
|---|---|---|
| Founded | LinkedIn lists the company as founded in 2008. | Gartner records Phoenix Security’s founding year as 2022. |
| Headquarters | Curitiba, Brazil | The About page lists Phoenix Security UK HQ at 124 City Road, EC1V 2NX. |
| Integrations | Listed integrations include GitHub, GitLab, Azure DevOps, Jenkins, Jira, Slack, Microsoft Teams, Snyk, Checkmarx, ServiceNow, Semgrep, SonarQube, Veracode, Power BI and others. | GetApp lists integrations including Mend, Qualys Cloud Platform, GitHub, Jira, JFrog Xray, Nessus, Detectify, SonarQube, Snyk, Microsoft Teams, Slack, SonarCloud and ServiceNow. |
| Licence | The commercial platform is not presented as open source, while the public documentation repository is licensed under MIT. | The SaaS terms prohibit copying, reverse engineering, source-code derivation and derivative works, indicating the core platform is proprietary rather than open source. |
| Purpose | Conviso Platform centralizes application security context and vulnerabilities to help organizations operate AppSec programs at scale. | Phoenix Security describes its platform as AI security governance that connects code to runtime, assigns ownership, prioritizes reachable exposure, and supports opt-in AI-assisted remediation. |
| Rating on Gartner Peer Insights | 4.5 out of 5 from 40 reviews for Conviso overall; the listing shows Conviso Platform with 4.5 from 30 ASPM reviews and 4.4 from 8 AST reviews. | 4.7 out of 5 from 57 reviews |
| Rating on GetApp | 4.0 out of 5 from 1 review. | 4.7 out of 5 from 74 reviews |
| Security certifications | Conviso states that its information-security and service-management systems are certified to ISO 27001 and ISO 20000. | Phoenix’s current platform page states that it is SOC 2 Type II and ISO 27001 certified. |
It suits organizations from startups to large corporations that need to organize application security findings and workflows. Teams should account for its cloud-only deployment and developer-based plan limits.
Phoenix Free may suit teams that need governance across up to 1,000 assets with dashboard reporting. Professional is described for growing and medium enterprises with a concise security team, while Enterprise is intended for larger teams.