Skip to content
SPECIFICTION
Get listed

Phoenix Security

phoenix.security

From £1,495/mo Free plan WebAPI
Visit phoenix.security
Spec score 8.5 #5 of 17 in Application Security Posture Management Software

What it is

Phoenix Security is a cloud platform for security governance that connects code findings with runtime exposure. It combines findings from SAST, SCA, containers, cloud, runtime, and ticketing in a normalized, deduplicated model, then maps ownership and prioritizes deployed, running, reachable exposure using threat intelligence and business context. Its AI agents can prepare minimum-impact fix plans, open pull requests when users opt in, run remediation campaigns, and measure risk reduction. The platform connects with security scanners and technology stacks across application, infrastructure, cloud, and container security; listed integrations include Microsoft Defender for Cloud, Lacework, Sysdig, Google Cloud SCC, and Aikido. Phoenix Free is free and includes up to 1,000 assets, two premium users plus guests, community support, and dashboard reporting. Professional costs £1,495/mo and lists 5,000 asset credits, 10 security admins plus guests, and 300 or more users. Enterprise pricing is available by contact and lists dedicated hosting and bring-your-own encryption key.

Spec sheet

What it does
Phoenix Security is a cloud application-security posture and unified vulnerability-management platform that correlates findings from code, dependencies, containers, cloud, runtime and ticketing into remediation workflows.Read 15 Oct 2026 · crunchbase.com
Purpose
Phoenix Security describes its platform as AI security governance that connects code to runtime, assigns ownership, prioritizes reachable exposure, and supports opt-in AI-assisted remediation.Read 30 Sep 2026 · phoenix.security
Integrations
GetApp lists integrations including Mend, Qualys Cloud Platform, GitHub, Jira, JFrog Xray, Nessus, Detectify, SonarQube, Snyk, Microsoft Teams, Slack, SonarCloud and ServiceNow.Read 15 Oct 2026 · getapp.com
Support
The free tier lists community support, while paid tiers list content support, priority Slack, priority email and customer-success assistance.Read 15 Oct 2026 · phoenix.security
Headquarters
The About page lists Phoenix Security UK HQ at 124 City Road, EC1V 2NX.Read 30 Sep 2026 · phoenix.security
Founded
Gartner records Phoenix Security’s founding year as 2022.Read 15 Oct 2026 · gartner.com
AI remediation
The product describes AI agents that generate fix plans, run remediation campaigns and can open opt-in pull requests while leaving humans in control.Read 15 Oct 2026 · phoenix.security
API authentication
API clients create an ID and secret, exchange them for a temporary bearer token and then authenticate subsequent requests with that token.Read 15 Oct 2026 · kb.phoenix.security
API extensibility
The raw-file import endpoint accepts multipart uploads and processes reports asynchronously, with status values such as TRANSLATING, IMPORTED and ERROR.Read 15 Oct 2026 · kb.phoenix.security
CLI and MCP
Phoenix announced open-source Python clients consisting of a v1.27 REST API CLI and an MCP server; the CLI installs with pipx from GitHub.Read 15 Oct 2026 · phoenix.security
Company founders
Crunchbase lists Alfonso Eusebio, Dimitri Calianno, Francesco Cipollone and Stefano Longhi as founders.Read 15 Oct 2026 · crunchbase.com
Company headquarters
The vendor lists its UK headquarters at 124 City Road, London EC1V 2NX, with a US office in Los Angeles.Read 15 Oct 2026 · phoenix.security
Company leadership
The About page identifies Francesco Cipollone as Phoenix Security's founder and CEO.Read 30 Sep 2026 · phoenix.security
Company legal name
Crunchbase identifies the legal entity as Security Phoenix Ltd and lists it as an active private for-profit company.Read 15 Oct 2026 · crunchbase.com
Company size
Gartner lists Phoenix Security as having 11–50 employees.Read 15 Oct 2026 · gartner.com
Coverage
The platform combines findings from SAST, SCA, containers, cloud, runtime, and ticketing in a normalized, deduplicated model.Read 30 Sep 2026 · phoenix.security
Documentation
The public knowledge base contains REST API, integration, settings, onboarding, workflow, vulnerability, application-management and user-management sections.Read 15 Oct 2026 · kb.phoenix.security
Enterprise hosting and encryption
Enterprise lists dedicated hosting and bring-your-own encryption key.Read 30 Sep 2026 · phoenix.security
Finding deduplication
Gartner reviewers specifically praise Phoenix for deduplicating SAST findings across multiple source scanners and for its finding attack-surface graph.Read 15 Oct 2026 · gartner.com
Free tier limits
Phoenix Free includes up to 1,000 assets, two premium users plus guests, community support, and dashboard reporting.Read 30 Sep 2026 · phoenix.security
Funding
Crunchbase shows six pre-seed funding rounds but masks the amounts and investor totals.Read 15 Oct 2026 · crunchbase.com
Hosting
The pricing comparison lists SaaS hosting for Free and Professional and dedicated SaaS hosting for Enterprise.Read 15 Oct 2026 · phoenix.security
Integration scope
Phoenix says it integrates with security scanners and native technology stacks spanning application, infrastructure, cloud, and container security.Read 30 Sep 2026 · phoenix.security
Intended customers
Phoenix describes Professional as intended for growing and medium enterprises with a concise security team, and Enterprise for larger teams.Read 30 Sep 2026 · phoenix.security
Licence
The SaaS terms prohibit copying, reverse engineering, source-code derivation and derivative works, indicating the core platform is proprietary rather than open source.Read 15 Oct 2026 · kb.phoenix.security
Limit: analytics visuals
A Gartner reviewer wanted more detailed analytics visuals in the user interface.Read 15 Oct 2026 · gartner.com
Limit: price
Gartner and GetApp reviewers repeatedly describe Phoenix as expensive or higher priced than competing products.Read 15 Oct 2026 · gartner.com
Limit: setup complexity
Reviewers report that deployment and configuration can be complex and require prior technical experience or substantial resources.Read 15 Oct 2026 · getapp.com
Notable news: Blue Shield
Phoenix announced Blue Shield on June 14, 2026 as a supply-chain firewall intended to block malicious packages and AI-agent skills before execution, with a free core tier.Read 15 Oct 2026 · phoenix.security
Notable news: rebrand
Phoenix announced on January 10, 2023 that AppSec Phoenix had rebranded to Phoenix Security as its platform expanded from application security into broader code-to-cloud vulnerability management.Read 15 Oct 2026 · phoenix.security
Ownership mapping
Phoenix maintains an ownership graph that maps findings to the responsible team, repository and service.Read 15 Oct 2026 · phoenix.security
Praise: support and deduplication
Gartner reviewers praise Phoenix’s engineering support and cross-scanner SAST deduplication capability.Read 15 Oct 2026 · gartner.com
Praise: usability and monitoring
GetApp reviewers commonly praise the user-friendly interface, real-time monitoring, customizable settings, vulnerability management and integrations.Read 15 Oct 2026 · getapp.com
Prioritization
Phoenix says it prioritizes deployed, running, and reachable exposure using threat intelligence and business context.Read 30 Sep 2026 · phoenix.security
Professional limits
Professional lists 5,000 asset credits, 10 security admins plus guests, and 300 or more users.Read 30 Sep 2026 · phoenix.security
Rating on Gartner Peer Insights
4.7 out of 5 from 57 reviewsRead 15 Oct 2026 · gartner.com
Rating on GetApp
4.7 out of 5 from 74 reviewsRead 15 Oct 2026 · getapp.com
Remediation
Its AI agents can create minimum-impact fix plans, open opt-in pull requests, run remediation campaigns, and measure risk reduction.Read 30 Sep 2026 · phoenix.security
REST API
Phoenix exposes a REST API at api.securityphoenix.cloud for automated scanner-report imports and vulnerability management.Read 15 Oct 2026 · kb.phoenix.security
Risk prioritization
The platform prioritizes vulnerabilities using deployment exposure, reachability, threat intelligence and business context so teams can focus on the risks most relevant to them.Read 15 Oct 2026 · phoenix.security
Scanner coverage
The REST import documentation lists native report translators for dozens of scanners, including Snyk, SonarQube, Trivy, Qualys, Tenable, GitLab, Semgrep, Nuclei and ZAP.Read 15 Oct 2026 · kb.phoenix.security
Security certifications
Phoenix’s current platform page states that it is SOC 2 Type II and ISO 27001 certified.Read 15 Oct 2026 · phoenix.security
System requirements
The vendor documents browser-based signup and login to securityphoenix.cloud and lists SaaS hosting rather than a customer-installed server product.Read 15 Oct 2026 · kb.phoenix.security
Threat intelligence
Paid tiers include exploitability evidence, likelihood-of-exploitation scoring, CISA KEV and EPSS data, popularity signals and optional advanced threat-intelligence feeds.Read 15 Oct 2026 · phoenix.security

Plans and prices

Phoenix Free Free Free /mo Up to 1000 assets · 2 premium users + guests · community support · dashboard reporting Read 15 Oct 2026 · phoenix.security
Phoenix Professional £1,495 a month £1,495 /mo 5,000 asset credits · 10 security admins + guests · 300+ users · cyber risk graph · SCA and Web/API DAST · threat intelligence · ML tech-stack insights · automated workflows · remediation campaigns Read 15 Oct 2026 · phoenix.security
Phoenix Enterprise Priced on request Contact 15,000+ asset credits/unlimited · 20 admins · SSO and AD · 900+ users · container security · deduplication and reachability analysis · external endpoint assessment · advanced threat intelligence · dedicated hosting · BYOK · AI remediation campaigns Read 15 Oct 2026 · phoenix.security

Every Phoenix Security plan and price →

Strong points and limits

Strong points

  • Combines SAST, SCA, container, cloud, runtime, and ticketing findings
  • Maps ownership and prioritizes reachable exposure
  • AI agents can open opt-in pull requests
  • Free plan includes up to 1,000 assets
  • Supports cloud deployment and remediation workflows

Limits

  • Free plan is limited to 1,000 assets
  • Professional costs £1,495/mo
  • Threat-intelligence and AI remediation extras may cost more

Who it suits

Phoenix Free suits teams that need security governance with a limited asset and user allowance. Professional is described for growing and medium enterprises with a concise security team; Enterprise is aimed at larger teams.

Verdict

Phoenix Security brings multiple security findings into one ownership and prioritization model, with opt-in AI remediation workflows. The free allowance is defined, while Professional starts at £1,495/mo and Enterprise pricing is by contact.

Where Specifiction places it

Alternatives to Phoenix SecurityAll alternatives →