ArcherySec vs Conviso Platform
ArcherySec
archerysec.com
Conviso Platform
convisoappsec.comSide by side
| Figure | ArcherySec | Conviso Platform |
|---|---|---|
| Price from | Free | $19/mo |
| Free plan | Yes | Yes |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | Yes | — |
| macOS | Yes | — |
| Linux | Yes | — |
| API | Yes | Yes |
| Self-hosted | Yes | — |
| Plans published | 1 | 2 |
| Spec score · Application Security Orchestration Platforms | 8.9 (#2) | 9.1 (#1) |
| API | The documentation describes REST APIs for scanning and vulnerability management. | Conviso exposes a GraphQL API with queries and mutations for projects, scans and vulnerabilities, authenticated by API keys and limited to 1,200 requests per minute. |
| Deployment | The project README documents Linux and Windows installation, Docker images, Docker Compose, and AWS serverless deployment using Zappa. | Conviso Platform is cloud-based and does not offer an on-premises deployment option. |
| Founded | 2017 | LinkedIn lists the company as founded in 2008. |
| Headquarters | India | Curitiba, Brazil |
| Integrations | Documented connectors include OWASP ZAP, Burp, Arachni, OpenVAS, Jira, and email. | Listed integrations include GitHub, GitLab, Azure DevOps, Jenkins, Jira, Slack, Microsoft Teams, Snyk, Checkmarx, ServiceNow, Semgrep, SonarQube, Veracode, Power BI and others. |
| Purpose | ArcherySec is an open-source vulnerability assessment and management tool for developers and penetration testers. | Conviso Platform centralizes application security context and vulnerabilities to help organizations operate AppSec programs at scale. |
| Support | The Jira connector documentation directs users with questions to [email protected] or to raise an issue. | The pricing comparison lists a 48-hour SLA for Free and a 24-hour SLA for Developers. |
Plans
In their own words
ArcherySec
ArcherySec is a free, open-source vulnerability assessment and management tool for developers, penetration testers, and DevOps teams. It scans web applications and networks through supported tools, then brings scan findings together for review. Features include authenticated web scans, Selenium-based web application scanning, severity-based prioritization, false-positive tracking, finding deduplication, and remediation workflows. The product lists more than 80 commercial and open-source tool integrations; documented connectors include OWASP ZAP, Burp, Arachni, OpenVAS, Jira, and email. Its CLI can run in CI/CD pipelines and return pass or fail exit codes according to configured scan policies. REST APIs cover scanning and vulnerability management. The tool supports periodic and concurrent scans. Deployment documentation covers Linux, Docker, and Vagrant with Ansible, and the project provides Windows setup and run scripts. ArcherySec is self-hosted and distributed under the GPL-3.0 license. Users need to run supported scanners and provide their endpoints. The project advises against public exposure and recommends restricting the signup page in production.
Conviso Platform
Conviso Platform centralizes application security information for organizations running AppSec programs. It organizes assets, brings vulnerability findings together, and connects architectural threats with results from tests and scans. Listed testing features include SAST, DAST, IAST, SCA, and container testing. The service runs in the cloud and is available through web and API; there is no on-premises deployment option. Integrations include GitHub, GitLab, Jenkins, Jira, Slack, Snyk, Semgrep, ServiceNow, and Microsoft Teams. Its GraphQL API supports work with projects, vulnerabilities, and scans, with a documented ceiling of 1,200 requests per minute. Developers plan users can access AppSec Agent AI for diagnostics, fixes, and support during development. Conviso says it holds ISO 27001 and ISO 20000 certifications. The Free plan allows up to five contributing developers, five assets, 10 users, and two integrations. Developers starts at $19 per contributing developer per month, with a 12-month minimum contract and a listed annual charge of $2,040. Developer counts use commits to associated repositories in the previous 30 days.