# Conviso > Conviso is a Brazilian Application Security (AppSec) company. It runs the full AppSec program for engineering teams that ship code written by people and by AI agents: Conviso Platform (detection, risk prioritization, pentest and audit management, program strategy in one data layer) plus AppSec specialists who run pentests, red team engagements and PCI audits. Conviso is a PCI DSS and PCI PIN auditor and an Approved Scanning Vendor (ASV). Key facts: - The site is bilingual. English pages live at the root; Brazilian Portuguese pages live under /pt-br/. - Conviso Platform is sold as five products plus add-ons. The products can be combined, and every finding from scanners, pentests and audits lands in the same risk workflow. - Conviso acts as the PCI auditor that certifies its clients (Conviso is the assessor, not the certified party). - Conviso holds ISO 27001 and ISO 20000 certifications. - Conviso acquired Matrix Cyber Consulting (December 2024) and Site Blindado (April 2025). ## Platform - [Conviso Platform](https://www.convisoappsec.com/conviso-platform): Overview of the platform: detection, prioritized risk, pentests, audits and program strategy in one place, built for code written by AI agents. - [Pricing](https://www.convisoappsec.com/platform/pricing): Products, add-ons and plan options. - [Integrations](https://www.convisoappsec.com/platform/integrations): DevOps, CI/CD, repository and ticketing integrations. - [Conviso Platform vs. ASPM vendors](https://www.convisoappsec.com/platform/general-comparison): How Conviso compares with other ASPM vendors on visibility, automation, prioritization and risk management. - [Conviso Platform vs. Jira](https://www.convisoappsec.com/resources/comparative-jira): Why managing AppSec risk in a generic ticketing tool falls short, and what the platform adds. - [What is ASPM](https://www.convisoappsec.com/aspm): Explainer on Application Security Posture Management as a category. ## Platform products - [Vuln Intelligence](https://www.convisoappsec.com/platform/products/vuln-intelligence): Findings from every scanner in one queue, ranked by asset risk and code origin, with tickets, owners and SLAs. - [AI Secure Code](https://www.convisoappsec.com/platform/products/ai-secure-code): SAST, SCA, secrets, IaC and container scanning in one pipeline; AI reduces false positives and reviews agent-written code before the pull request. - [Web and API Scan](https://www.convisoappsec.com/platform/products/web-and-api-scan): Dynamic testing of running web apps and APIs, including authenticated areas, with no source code access. - [Threat & Program Management](https://www.convisoappsec.com/platform/products/threat-program-management): AI-assisted threat modeling, maturity measured against OWASP SAMM, and documentation of the AppSec program from asset level to board reporting. - [Offensive & Audit Manager](https://www.convisoappsec.com/platform/products/offensive-audit-manager): Pentest, offensive security and PCI program management with trackable scope, findings followed to the fix, and evidence per asset. - [Autonomous Pentest AI (add-on)](https://www.convisoappsec.com/platform/addons/autonomous-pentest-ai): Continuous pentesting on every release, with exploits validated by proof of concept, documented attack chains and built-in retests. ## Professional services - [Professional services overview](https://www.convisoappsec.com/professional-services): All specialist-led AppSec services. - [Offensive Security](https://www.convisoappsec.com/professional-services/offensive-security): Overview of pentest and red team offerings. - [Pentest](https://www.convisoappsec.com/professional-services/pentest): Custom penetration tests for web, mobile, API, network and cloud. - [Red Team](https://www.convisoappsec.com/professional-services/red-team): Simulated real-world attacks to test organizational resilience. - [AppSec Squads](https://www.convisoappsec.com/professional-services/appsec-squads): Dedicated AppSec specialists working alongside the client's teams (done-for-you model). - [AppSec Journey](https://www.convisoappsec.com/professional-services/appsec-journey): Structured program to build an application security culture. - [AppSec Training](https://www.convisoappsec.com/professional-services/appsec-training): Hands-on secure coding training for developers. - [Secure Product Design](https://www.convisoappsec.com/professional-services/secure-product-design): Threat modeling and secure architecture consulting. - [Gap Analysis](https://www.convisoappsec.com/professional-services/gap-analysis): AppSec maturity diagnosis based on OWASP SAMM, with a tailored improvement plan. - [Vendor Assessment](https://www.convisoappsec.com/professional-services/vendor-assessment): Security assessment of third-party suppliers. - [Cloud Security](https://www.convisoappsec.com/professional-services/cloud-security): Offensive testing, secure architecture and DevSecOps automation for cloud applications. - [Web and API Protection (WAF)](https://www.convisoappsec.com/professional-services/waf): Continuous protection for exposed web applications and APIs. ## PCI compliance - [PCI DSS and PCI PIN Certification](https://www.convisoappsec.com/professional-services/pci-dss-and-pin-certification): Official PCI DSS and PCI PIN audits conducted by Conviso's qualified assessors, including formal reports (RoC/AoC). - [PCI Consulting](https://www.convisoappsec.com/professional-services/pci-consulting): Readiness, scoping and continuous compliance support for PCI DSS and PCI PIN Security. - [Approved Scanning Vendor (ASV)](https://www.convisoappsec.com/professional-services/approved-scanning-vendor-asv): Official PCI DSS external vulnerability scans with validated reports. ## Customer success cases - [iFood Pago](https://www.convisoappsec.com/resources/success-case/case-ifood): Building an independent PCI DSS scope from scratch under a tight deadline, with the audit completed on schedule. - [PagueVeloz](https://www.convisoappsec.com/resources/success-case/pci-pagueveloz): PCI DSS compliance for a payments company. - [Abler](https://www.convisoappsec.com/resources/success-case/case-abler): Autonomous AI Pentest on a SaaS recruitment platform; all findings fixed the same day, critical CVEs reduced from 30 to 1. - [Base de Clientes](https://www.convisoappsec.com/resources/success-case/base-de-clientes): First Autonomous AI Pentest run; critical finding identified with a 15-minute setup. ## Use cases - [Autonomous Pentest with AI](https://www.convisoappsec.com/resources/use-case/autonomous-pentest-with-ai): Continuous, AI-driven pentesting. - [Application Security Testing](https://www.convisoappsec.com/resources/use-case/application-security-testing): Orchestrating SAST, DAST and SCA with risk-based prioritization. - [Vulnerability Management](https://www.convisoappsec.com/resources/use-case/vulnerability-management): Risk-based prioritization and fewer false positives. - [Fintechs](https://www.convisoappsec.com/resources/use-case/fintechs): AppSec for regulated financial companies. - [Healthtechs](https://www.convisoappsec.com/resources/use-case/healthtechs): AppSec and LGPD compliance for health technology companies. - [Telecom](https://www.convisoappsec.com/resources/use-case/telecom): AppSec challenges for telecom operators. - [Retail](https://www.convisoappsec.com/resources/use-case/retail): AppSec challenges for retail. ## Resources - [Resource library](https://www.convisoappsec.com/resources): E-books, whitepapers, webinars and articles on AppSec and ASPM. - [Demos library](https://www.convisoappsec.com/demos): Interactive and recorded demos of Conviso Platform. - [Use cases library](https://www.convisoappsec.com/use-cases-library): Index of use cases and demos. - [ASPM ROI calculator](https://www.convisoappsec.com/resources/aspm-roi-calculator): Estimate the return of an AppSec program on Conviso Platform. - [Code Fighters Lab](https://www.convisoappsec.com/resources/code-fighters-lab): Conviso's AppSec research and development team. ## Company - [About us](https://www.convisoappsec.com/about-us): Company background and history. - [Partners](https://www.convisoappsec.com/partners): Partner program. - [Security Program](https://www.convisoappsec.com/security-program): Conviso's own information security management system and ISO certifications. - [Contact](https://www.convisoappsec.com/contact): Talk to the Conviso team. ## Português (Brasil) - [Home](https://www.convisoappsec.com/pt-br/home): Página inicial em português. - [Conviso Platform](https://www.convisoappsec.com/pt-br/conviso-platform): Visão geral da plataforma. - [Planos e preços](https://www.convisoappsec.com/pt-br/platform/pricing): Produtos, add-ons e planos. - [Vuln Intelligence](https://www.convisoappsec.com/pt-br/platform/produtos/vuln-intelligence): Findings de todas as fontes priorizados por risco. - [AI Secure Code](https://www.convisoappsec.com/pt-br/platform/produtos/ai-secure-code): SAST, SCA, secrets, IaC e containers num único pipeline. - [Web and API Scan](https://www.convisoappsec.com/pt-br/platform/produtos/web-and-api-scan): Teste dinâmico de aplicações web e APIs. - [Threat & Program Management](https://www.convisoappsec.com/pt-br/platform/produtos/threat-program-management): Threat modeling, OWASP SAMM e gestão do programa de AppSec. - [Offensive & Audit Manager](https://www.convisoappsec.com/pt-br/platform/produtos/offensive-audit-manager): Gestão de pentest, segurança ofensiva e programa PCI. - [Autonomous Pentest AI](https://www.convisoappsec.com/pt-br/platform/addons/autonomous-pentest-ai): Pentest autônomo a cada release. - [Serviços de AppSec](https://www.convisoappsec.com/pt-br/servicos-appsec): Todos os serviços conduzidos por especialistas. - [Certificação PCI DSS e PIN](https://www.convisoappsec.com/pt-br/professional-services/certificacao-pci-dss-e-pin): Auditoria oficial PCI DSS e PCI PIN. - [Consultoria PCI](https://www.convisoappsec.com/pt-br/professional-services/consultoria-pci): Preparação e conformidade contínua PCI. - [ASV](https://www.convisoappsec.com/pt-br/professional-services/approved-scanning-vendor-asv): Scans oficiais PCI DSS. - [Case iFood](https://www.convisoappsec.com/pt-br/recursos/sucess-case/case-ifood): Certificação PCI DSS do iFood Pago. - [Biblioteca de recursos](https://www.convisoappsec.com/pt-br/recursos): Materiais sobre AppSec e ASPM. - [Glossário AppSec](https://www.convisoappsec.com/pt-br/glossario-appsec): Termos de segurança de aplicações. - [Conviso Academy](https://www.convisoappsec.com/pt-br/conviso-academy): Formação gratuita em AppSec para desenvolvedores. - [Diagnóstico de maturidade](https://www.convisoappsec.com/pt-br/recursos/security-assessment): Autoavaliação gratuita baseada no OWASP SAMM. - [Eventos](https://www.convisoappsec.com/pt-br/eventos): Agenda de eventos com participação da Conviso. - [Sobre nós](https://www.convisoappsec.com/pt-br/sobre-nos): Sobre a Conviso. - [Contato](https://www.convisoappsec.com/pt-br/contato): Fale com o time. ## Optional - [Matrix Cyber Consulting acquisition](https://www.convisoappsec.com/matrix-acquisition): Announcement of the acquisition and what it adds to compliance services. - [Site Blindado acquisition](https://www.convisoappsec.com/site-blindado-acquisition): Announcement of the acquisition and the e-commerce security portfolio it brings. - [Information Security and Services policy](https://www.convisoappsec.com/information-security-and-services): Conviso's information security and services policy. - [Customer story: Financial asset market](https://www.convisoappsec.com/resources/customer-stories/financial-asset-market): Web, mobile and network pentest for a financial market company. - [Customer story: Financial management](https://www.convisoappsec.com/resources/customer-stories/financial-management): Access control risks found and fixed. - [Customer story: Fashion retail](https://www.convisoappsec.com/resources/customer-stories/retail-focused-on-fashion): Security culture built through developer training. - [Customer story: Digital solutions](https://www.convisoappsec.com/resources/customer-stories/digital-solutions): Training program for a digital solutions company. - [Customer story: Rewards program](https://www.convisoappsec.com/resources/customer-stories/rewards-program): AppSec transformation for a loyalty program operator.