Conviso Platform vs OX Security
Conviso Platform
convisoappsec.comOX Security
ox.securitySide by side
| Figure | Conviso Platform | OX Security |
|---|---|---|
| Price from | $19/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| Windows | — | Yes |
| macOS | — | Yes |
| Linux | — | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 2 | 6 |
| Spec score · Application Security Orchestration Platforms | 9.1 (#1) | 8.5 (#5) |
| Spec score · Application Security Posture Management Software | 9.0 (#1) | 8.5 (#4) |
| API | Conviso exposes a GraphQL API with queries and mutations for projects, scans and vulnerabilities, authenticated by API keys and limited to 1,200 requests per minute. | The public API retrieves applications, artifacts, issues, severity factors, and attack-path graphs, and supports policy and workflow integrations. |
| CLI | The CLI uses GraphQL for local workflows, automation, CI/CD and bulk operations; installation is documented through PyPI with Python 3.10+ required. | OX documents a command-line scanner with pre-commit and pre-push Git hooks; the CLI scans only modified files and requires Node.js, npm, and Git. |
| Deployment | Conviso Platform is cloud-based and does not offer an on-premises deployment option. | OX says deployment takes minutes because it connects directly to existing tools without agents or complex setup. |
| Founded | LinkedIn lists the company as founded in 2008. | OX Security was founded in 2021. |
| Headquarters | Curitiba, Brazil | LinkedIn lists New York, New York as headquarters, while company databases identify Tel Aviv/Ramat Gan, Israel as the Israeli headquarters location. |
| Integrations | Listed integrations include GitHub, GitLab, Azure DevOps, Jenkins, Jira, Slack, Microsoft Teams, Snyk, Checkmarx, ServiceNow, Semgrep, SonarQube, Veracode, Power BI and others. | Supported connections include GitHub, GitLab, Bitbucket, Azure Repos, Gerrit, AWS CodeCommit, Jenkins, Azure Pipelines, Docker Hub, JFrog, AWS, Google Cloud, Jira, Slack, Splunk, and many security scanners. |
| Licence | The commercial platform is not presented as open source, while the public documentation repository is licensed under MIT. | OX software is proprietary; terms grant a revocable, non-exclusive access licence and reserve OX ownership of the software and related intellectual property. |
| Rating on Capterra | 4.0 out of 5 from 1 review. | 4.7 out of 5 from 3 reviews |
| Rating on G2 | 0.0 out of 5 from 0 reviews; G2 says there are not enough reviews to provide buying insight. | 4.8 out of 5 from 51 reviews |
| Rating on GetApp | 4.0 out of 5 from 1 review. | 4.7 out of 5 from 3 reviews |
| Security certifications | Conviso states that its information-security and service-management systems are certified to ISO 27001 and ISO 20000. | OX states that SOC 2 Type II materials are available on request and that it is ISO 27001:2022 certified and GDPR compliant. |
| What it does | Conviso Platform is an application-security posture management system that centralizes application risk, vulnerabilities, assets, requirements and security policies. | OX Security provides application security from AI-assisted coding through production runtime, linking findings back to their creation point. |
Plans
OX Security
- Free servicesFree
- OX Agentic PentesterPriced on request
- OX CloudPriced on request
- OX CodePriced on request
- OX PlatformPriced on request
- OX VibeSecPriced on request
In their own words
Conviso Platform
Conviso Platform centralizes application security information for organizations running AppSec programs. It organizes assets, brings vulnerability findings together, and connects architectural threats with results from tests and scans. Listed testing features include SAST, DAST, IAST, SCA, and container testing. The service runs in the cloud and is available through web and API; there is no on-premises deployment option. Integrations include GitHub, GitLab, Jenkins, Jira, Slack, Snyk, Semgrep, ServiceNow, and Microsoft Teams. Its GraphQL API supports work with projects, vulnerabilities, and scans, with a documented ceiling of 1,200 requests per minute. Developers plan users can access AppSec Agent AI for diagnostics, fixes, and support during development. Conviso says it holds ISO 27001 and ISO 20000 certifications. The Free plan allows up to five contributing developers, five assets, 10 users, and two integrations. Developers starts at $19 per contributing developer per month, with a 12-month minimum contract and a listed annual charge of $2,040. Developer counts use commits to associated repositories in the previous 30 days.
OX Security
OX Security is an application security platform that covers software from code through runtime, including protection in AI editors and IDEs. OX Code addresses SAST, software composition analysis, secrets and PII, SBOM, infrastructure as code, CI/CD, Git posture, containers, malicious dependencies and API discovery. OX Cloud includes runtime security, cloud posture tools, inventory and attack-path mapping; OX VibeSec applies organization-specific context to AI coding tools. OX Agentic Pentester performs AI-driven penetration testing, API assessments and proof-of-concept exploitation, with OWASP mapping. The platform lists more than 150 integrations, including GitHub, GitLab, AWS, Jira, Slack and ChatGPT. It supports hybrid deployment and lists on-premises options, SSO, automatic provisioning, MCP and API support. OX says it connects to existing tools without agents or complex setup. Pricing is available on request, based on active developers who committed code in connected source control in the past 90 days or are expected to contribute during the licensing period. The IDE extension supports Visual Studio Code and compatible environments such as Cursor, Windsurf and VSCodium.