Skip to content
SPECIFICTION
Get listed

Conviso Platform

convisoappsec.com

From $19/mo Free plan WebAPI
Visit convisoappsec.com
Spec score 9.1 #1 of 23 in Application Security Orchestration Platforms

What it is

Conviso Platform centralizes application security information for organizations running AppSec programs. It organizes assets, brings vulnerability findings together, and connects architectural threats with results from tests and scans. Listed testing features include SAST, DAST, IAST, SCA, and container testing. The service runs in the cloud and is available through web and API; there is no on-premises deployment option. Integrations include GitHub, GitLab, Jenkins, Jira, Slack, Snyk, Semgrep, ServiceNow, and Microsoft Teams. Its GraphQL API supports work with projects, vulnerabilities, and scans, with a documented ceiling of 1,200 requests per minute. Developers plan users can access AppSec Agent AI for diagnostics, fixes, and support during development. Conviso says it holds ISO 27001 and ISO 20000 certifications. The Free plan allows up to five contributing developers, five assets, 10 users, and two integrations. Developers starts at $19 per contributing developer per month, with a 12-month minimum contract and a listed annual charge of $2,040. Developer counts use commits to associated repositories in the previous 30 days.

Spec sheet

What it does
Conviso Platform is an application-security posture management system that centralizes application risk, vulnerabilities, assets, requirements and security policies.Read 15 Oct 2026 · convisoappsec.com
Purpose
Conviso Platform centralizes application security context and vulnerabilities to help organizations operate AppSec programs at scale.Read 28 Sep 2026 · convisoappsec.com
Audience
Conviso describes the platform as serving organizations from startups to large corporations.Read 28 Sep 2026 · convisoappsec.com
Deployment
Conviso Platform is cloud-based and does not offer an on-premises deployment option.Read 28 Sep 2026 · convisoappsec.com
API
Conviso exposes a GraphQL API with queries and mutations for projects, scans and vulnerabilities, authenticated by API keys and limited to 1,200 requests per minute.Read 15 Oct 2026 · docs.convisoappsec.com
Integrations
Listed integrations include GitHub, GitLab, Azure DevOps, Jenkins, Jira, Slack, Microsoft Teams, Snyk, Checkmarx, ServiceNow, Semgrep, SonarQube, Veracode, Power BI and others.Read 15 Oct 2026 · convisoappsec.com
Security
Conviso says it is certified in ISO 27001 and ISO 20000 standards.Read 28 Sep 2026 · convisoappsec.com
Support
The pricing comparison lists a 48-hour SLA for Free and a 24-hour SLA for Developers.Read 28 Sep 2026 · convisoappsec.com
Headquarters
Curitiba, BrazilRead 23 Sep 2026 · convisoappsec.com
Founded
LinkedIn lists the company as founded in 2008.Read 15 Oct 2026 · linkedin.com
AI
The AppSec Agent AI is available to Developers plan users and is described as providing diagnostics, fixes, and support within the development cycle.Read 28 Sep 2026 · convisoappsec.com
AI capabilities
The platform describes AI functions for normalization, deduplication, risk prioritization, remediation guidance and large-scale security insights.Read 15 Oct 2026 · docs.convisoappsec.com
AI Secure Code
AI Secure Code provides context-aware SAST, SCA with CVE monitoring, SBOM inventory, secrets detection, IaC analysis and scans on new commits.Read 15 Oct 2026 · convisoappsec.com
CLI
The CLI uses GraphQL for local workflows, automation, CI/CD and bulk operations; installation is documented through PyPI with Python 3.10+ required.Read 15 Oct 2026 · docs.convisoappsec.com
Company size and location
LinkedIn lists Conviso Application Security as privately held, headquartered in Curitiba, Paraná, with 51–200 employees.Read 15 Oct 2026 · linkedin.com
Contract
The minimum contract period is 12 months, with monthly or annual payment options and a stated 20% discount for annual payments.Read 28 Sep 2026 · convisoappsec.com
Documentation depth
Documentation covers posture, vulnerability, project and threat-modeling workflows, scanning, AI capabilities, role-based guides, integrations, CLI and API reference.Read 15 Oct 2026 · docs.convisoappsec.com
Independent platform coverage
GetApp lists web, Android and iPhone/iPad as supported platforms and identifies 15 integrations.Read 15 Oct 2026 · getapp.com
Independent pricing
GetApp lists Conviso from R$2,250 per month and marks both a free trial and free version as available.Read 15 Oct 2026 · getapp.com
Licence
The commercial platform is not presented as open source, while the public documentation repository is licensed under MIT.Read 15 Oct 2026 · github.com
Limit: Gartner reviewer complaint
A Gartner reviewer said complex filters made vulnerability identification less intuitive and time-consuming.Read 15 Oct 2026 · gartner.com
Limit: missing static analysis
The Capterra reviewer said Conviso lacked a static-analysis solution comparable to Veracode or Checkmarx.Read 15 Oct 2026 · capterra.com
Limit: reporting and bugs
That Capterra reviewer wanted a PCI-compliant technical report and reported beta releases that sometimes introduced bugs.Read 15 Oct 2026 · capterra.com
Offensive and audit manager
Pentest, red-team and audit initiatives can be scoped with evidence, requirements, findings, PCI audit data and execution history.Read 15 Oct 2026 · convisoappsec.com
Praise: PCI support
The sole Capterra reviewer praised Conviso for helping maintain PCI DSS certification, ease of use and integration with business processes when supported by the vendor team.Read 15 Oct 2026 · capterra.com
Pricing limit
Contributing developers are counted based on commits to associated repositories in the preceding 30 days.Read 28 Sep 2026 · convisoappsec.com
Rating on Capterra
4.0 out of 5 from 1 review.Read 15 Oct 2026 · capterra.com
Rating on G2
0.0 out of 5 from 0 reviews; G2 says there are not enough reviews to provide buying insight.Read 15 Oct 2026 · g2.com
Rating on Gartner Peer Insights
4.5 out of 5 from 40 reviews for Conviso overall; the listing shows Conviso Platform with 4.5 from 30 ASPM reviews and 4.4 from 8 AST reviews.Read 15 Oct 2026 · gartner.com
Rating on GetApp
4.0 out of 5 from 1 review.Read 15 Oct 2026 · getapp.com
Release news
Release 4.26, dated August 28, 2026, added SSL certificate management, tag-driven risk policies, pull-request scans, Security Gate updates, integrations and SBOM visibility.Read 15 Oct 2026 · docs.convisoappsec.com
Risk insights
The platform inventories applications, APIs and services as assets, classifies criticality and exposure, and correlates architectural threats with scan findings.Read 15 Oct 2026 · convisoappsec.com
Risk management
The platform organizes assets, consolidates vulnerabilities, and links architectural threats with findings from tests and scans.Read 28 Sep 2026 · convisoappsec.com
SDK and extensibility
A public Backstage plugin syncs catalog entities into Conviso assets and exposes REST endpoints for importing, syncing and configuring integrations.Read 15 Oct 2026 · github.com
Security certifications
Conviso states that its information-security and service-management systems are certified to ISO 27001 and ISO 20000.Read 15 Oct 2026 · convisoappsec.com
Security Gate
Security Gate policies can block pipeline builds according to vulnerability severity and count thresholds, with execution history and rule explanations.Read 15 Oct 2026 · docs.convisoappsec.com
Self-hosting limit
The vendor states that Conviso Platform is exclusively cloud-based and has no on-premises deployment option.Read 15 Oct 2026 · convisoappsec.com
Testing
The pricing page lists SAST, DAST, IAST, SCA, and container testing among the platform’s application security testing features.Read 28 Sep 2026 · convisoappsec.com
Vulnerability intelligence
It ingests SAST, DAST, SCA, penetration-test and external-scanner findings, deduplicates them, enriches context and prioritizes by risk.Read 15 Oct 2026 · convisoappsec.com
Web and API scanning
The web/API scanner supports recurring tests, path scoping, endpoint identification, execution comparison and vulnerability-workflow integration.Read 15 Oct 2026 · convisoappsec.com

Plans and prices

Free Free U$0 /by contributing developer /per month Up to 5 contributing developers · 5 assets · 10 users · 2 integrations Read 15 Oct 2026 · convisoappsec.com
Developers $19 a month from U$19 /per contributing developer /per month · $2,040 charged per year +5 contributing developers · unlimited assets · unlimited users · unlimited integrations Read 15 Oct 2026 · convisoappsec.com

Every Conviso Platform plan and price →

Strong points and limits

Strong points

  • Includes SAST, DAST, IAST, SCA, and container testing.
  • Links threats with findings from tests and scans.
  • GraphQL API supports projects, vulnerabilities, and scans.
  • Free plan includes five developers and five assets.

Limits

  • No on-premises deployment option.
  • Free plan is limited to two integrations.
  • Paid plan has a 12-month minimum contract.
  • Developer counts use recent repository commits.

Who it suits

Conviso describes the platform as serving organizations from startups to large corporations. It may suit teams that want centralized vulnerability context, testing, integrations, and remediation workflows in a cloud service.

Verdict

Conviso Platform combines security findings, asset context, and testing in a cloud AppSec service with a broad listed integration set. Check the Free plan limits and annual contract terms against your team’s needs.

Where Specifiction places it

Alternatives to Conviso PlatformAll alternatives →