Phoenix Security Contextual ASPM is the only international ASPM being selected as top ASPM solution

Meta Description: Discover why Phoenix Security is a leader in Application Security Posture Management (ASPM), as recognized in the 2024 Gartner Voice of the Customer report. With a customer-centric approach, contextual code-to-cloud risk management, and exceptional support, Phoenix Security sets new standards in cybersecurity. Explore how the only European ASPM provider is transforming security practices globally.
Discover why Phoenix Security is a leader in Application Security Posture Management (ASPM), as recognized in the 2024 Gartner Voice of the Customer report. With a customer-centric approach, contextual code-to-cloud risk management, and exceptional support, Phoenix Security sets new standards in cybersecurity. Explore how the only European ASPM provider is transforming security practices globally.
Phoenix Security ASPM Named Leader for Customer Support and Satisfaction 2024

Application security and cloud security are now converging into Application Security Posture Management (ASPM), and Phoenix Security has positioned itself as a leader in this space. We’re proud to be the only European company recognized in the Gartner Voice of the Customer for ASPM, consistently pushing the boundaries with our contextual, code-to-cloud risk-based vulnerability management. Since our inception, our mission has been to bring innovation, collaboration, and customer success to the forefront of cybersecurity. 81% recommendation rate to peers and a strong growth due to peer-to-peer recommendation. We at Phoenix continue to focus on strong customer satisfaction.

Customer Satisfaction and Collaboration: A Core Focus

gartner, peer insight, voice of the customer,

At Phoenix Security, customer success isn’t just a goal—it’s embedded in their DNA. One of the company’s key strengths is its deep collaboration with customers. A recent review praised Phoenix for its “fantastic experience” during the proof of concept (PoC) process, where the customer was able to gain comprehensive insights into the platform and receive continuous support throughout. The review noted that the Phoenix team shines with exceptional support and quick resolution—a sentiment echoed by many customers across industries.

See what others have already experienced book a demo and leave us a review

Why Phoenix Security Customer keeps on referring to the leader in ASPM:

“The Phoenix team shines with exceptional support and quick resolution.”

“The Phoenix team is quick to respond and always willing to help. They have implemented custom features and listened to our feedback.”

“Phoenix is a user-friendly product that provides a wide range of powerful functionality.”

“The unified view of this platform and AI-driven prioritization have transformed our security workflows.”

“Phoenix is the silver bullet that I have been looking for. The remediation workflow started to make sense for us.”

“Phoenix provides real-time threat detection and security monitoring, which has been a game-changer for us.”

“What makes them unique is that they have done our job, so they understand the pain AppSecOps teams go through.”

Get a copy of Voice of the Customer for ASPM here or Leave Phoenix security a review here

Phoenix’s commitment to collaboration goes beyond the initial deployment phase. The platform is continuously evolving based on customer feedback, ensuring that the product aligns with the real-world needs of security teams. This proactive approach is one of the reasons Phoenix has quickly gained a reputation as a trusted partner in the cybersecurity space.

gartner, phoenix security, peer insight, voice of the customer,

As one customer emphasized on Gartner Peer Insights: “The Phoenix team is quick to respond and always willing to help. They have implemented custom features and listened to our feedback. The product is progressing so quickly for a startup, and I love having input into what we need next.” This highlights the close relationship Phoenix has built with its clients, tailoring its solutions to solve real challenges that security teams face daily.

gartner, peer insight, voice of the customer,

ASPM Innovation with Contextual Code-to-Cloud Visibility


What sets Phoenix Security apart in the ASPM Gartner landscape is our contextual, code-to-cloud view. This unique capability enables security and engineering teams to prioritize vulnerabilities based on deployment locations and risk, ensuring that teams focus on the most critical issues. One customer review described Phoenix as “the silver bullet that I have been looking for. Once we started using the tool, the remediation workflow started to make sense for us.”

Get in control of your Application Security posture and Vulnerability management

In a saturated market filled with buzzwords, Phoenix’s “code-to-cloud” remediation capabilities offer something truly unique. A reviewer described it as “the silver bullet that I have been looking for. Once we started using the tool, the remediation workflow started to make sense for us.” This statement highlights how Phoenix’s contextualized approach simplifies security processes and makes vulnerability management more actionable.

ASPM gartner, phoenix security, peer insight, voice of the customer,

The Only ASPM American leader born in European engineering

Phoenix Security is the only company originating in Europe, now America, that is recognized in the ASPM Gartner Voice of the Customer report. With strategic headquarters in London and the USA, we offer unique insights into US and European cybersecurity standards, including GDPR compliance, which gives us a competitive edge in addressing the needs of businesses across Europe.

Our recent expansion into North America has further bolstered our position, with key customers like Last Pass and IAS driving growth in the U.S. market. This international presence solidifies Phoenix Security as a global Application Security Posture Management leader.

Being headquartered in London also gives Phoenix a strategic advantage when it comes to understanding and addressing the challenges of European organizations, especially those dealing with GDPR and other region-specific compliance requirements.

ASPM gartner, phoenix security, customer

The only European ASPM moving to USA

Phoenix security has recently expanded in North America with the majority of satisfied customers in this region, with the recent happy customers from Last Pass to IAS driving some of the USA expansion.

Methodology: The Voice of the Customer

The Voice of the Customer is a Gartner report that synthesizes peer reviews into valuable insights for IT decision-makers. Vendors must meet stringent criteria, including having at least 20 published reviews and 15 ratings for capabilities like “Support/Delivery” within an 18-month period. This high bar ensures that only the most impactful solutions, like Phoenix Security, make the cut.

Customer Reviews Reflect Excellence

Phoenix Security’s customer feedback speaks volumes about our success. With 81% of customers recommending our product, many highlight the platform’s scalability, integration, and ease of use. As one customer noted, “Phoenix’s AI-driven prioritization and unified view have transformed our security workflows.”

To be included in this report, vendors must have 20 or more eligible published reviews, with at least 15 ratings for “Capabilities” and “Support/Delivery” during the specified 18-month submission period. Reviews from vendor partners or end users from companies with less than $50M in revenue are excluded to ensure a high standard of review credibility. The Voice of the Customer methodology is essential for organizations looking for authentic peer-driven insights into the ASPM landscape.

Customer Reviews Reflect Excellence

Customer feedback is one of the strongest indicators of a company’s success, and Phoenix Security has excelled in this area. A glowing review stated: “Phoenix is a user-friendly product that provides a wide range of powerful functionality.” Another customer pointed out how Phoenix’s “unified view of this platform” and its AI-driven prioritization have transformed their security workflows.

ASPM gartner, phoenix security, customer

With an 81% recommendation rate from customers, Phoenix consistently delivers on its promises. Many reviews highlight the platform’s scalability, customization options, and ease of integration with existing tools, making it a valuable asset for security teams aiming to enhance their cybersecurity posture.

Conclusion: Phoenix Security is Driving the Future of ASPM

Phoenix Security isn’t just an ASPM platform—it’s a comprehensive solution for cybersecurity innovation, customer success, and risk management. Our contextual, code-to-cloud approach and commitment to collaboration set new standards in the industry. As the only European company in the ASPM space, we continue to make waves globally.

Whether you’re a startup or an enterprise, Phoenix Security has the tools and expertise to elevate your security posture and protect your organization in today’s evolving threat landscape.

How Phoenix Security Can Help

attack graph phoenix security
ASPM

Organizations often face an overwhelming volume of security alerts, including false positives and duplicate vulnerabilities, which can distract from real threats. Traditional tools may overwhelm engineers with lengthy, misaligned lists that fail to reflect business objectives or the risk tolerance of product owners.

Phoenix Security offers a transformative solution through its Actionable Application Security Posture Management (ASPM), powered by AI-based Contextual Quantitative analysis. This innovative approach correlates runtime data with code analysis to deliver a single, prioritized list of vulnerabilities. This list is tailored to the specific needs of engineering teams and aligns with executive goals, reducing noise and focusing efforts on the most critical issues. Why do people talk about Phoenix

ASPM gartner, phoenix security, customer

Automated Triage: Phoenix streamlines the triage process using a customizable 4D risk formula, ensuring critical vulnerabilities are addressed promptly by the right teams.

Contextual Deduplication: Utilizing canary token-based traceability, Phoenix accurately deduplicates and tracks vulnerabilities within application code and deployment environments, allowing teams to concentrate on genuine threats.

Actionable Threat Intelligence: Phoenix provides real-time insights into vulnerabilities’ exploitability, combining runtime threat intelligence with application security data for precise risk mitigation.

ASPm, CISA KEV, Remote Code Execution, Inforamtion Leak, Category, Impact, MITRE&ATTACK, AI Assessment, Phoenix CISA KEV, Threat intelligence

By leveraging Phoenix Security, you not only unravel the potential threats but also take a significant stride in vulnerability management, ensuring your application security remains up to date and focuses on the key vulnerabilities.

Get in control of your Application Security posture and Vulnerability management



Additional Resources

For a comprehensive guide on leveraging this integration, check out our Lacework Integration with Phoenix Security


Support

Need help? Contact our support team at support@phoenix.security.

Francesco is an internationally renowned public speaker, with multiple interviews in high-profile publications (eg. Forbes), and an author of numerous books and articles, who utilises his platform to evangelize the importance of Cloud security and cutting-edge technologies on a global scale.

Discuss this blog with our community on Slack

Join our AppSec Phoenix community on Slack to discuss this blog and other news with our professional security team

From our Blog

Remote Code Execution flaws continue to undermine Kubernetes ingress integrity. IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) showcases severe threat vectors in NGINX-based proxies, leading to cluster-wide exposure. ASPM, robust remediation tactics, and strong application security solutions—like Phoenix Security—mitigate these vulnerabilities before ransomware groups exploit them.
Francesco Cipollone
Remote Code Execution flaws continue to undermine Kubernetes ingress integrity. IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974) showcases severe threat vectors in NGINX-based proxies, leading to cluster-wide exposure. ASPM, robust remediation tactics, and strong application security solutions—like Phoenix Security—mitigate these vulnerabilities before ransomware groups exploit them.
Francesco Cipollone
The recent Google acquisition of Wiz for $32 billion has sent shockwaves through the cybersecurity industry, particularly in the realm of Application Security Posture Management (ASPM). This monumental deal highlights the critical importance of cloud security and the growing demand for robust ASPM solutions. While the acquisition promises potential benefits for Google Cloud users, it also raises concerns about vendor lock-in and the future of cloud-agnostic security. Explore the implications of this acquisition and discover how neutral ASPM solutions like Phoenix Security can bridge the gap in multi-cloud environments, ensuring continuous, collaborative, and comprehensive security from code to cloud.” – Find Assets/Vulns by Scanner – Detailed findings Location information Risk-based Posture Management – Risk and Risk Magnitude for Assets – Filter assets and vulnerabilities by source scanner Integrations – BurpSuite XML Import – Assessment Import API Other Improvements – Improved multi-selection in filters – New CVSS Score column in Vulnerabilities
Alfonso Eusebio
The team at Phoenix Security pleased to bring you another set of new application security (ASPM) features and improvements for vulnerability management across application and cloud security engines. This release builds on top of previous releases with key additions and progress across multiple areas of the platform. Application Security Posture Management (ASPM) Enhancements • New Weighted Asset Risk Formula – Refined risk aggregation for tailored vulnerability management. • Auto-Approval of Risk Exceptions – Accelerate mitigation by automating security approvals. • Enhanced Risk Explorer & Business Unit Insights – Monitor and analyze risk exposure by business units for better prioritization. Vulnerability & Asset Management • Link Findings to Existing Tickets – Seamless GitHub, ServiceNow, and Azure DevOps integration. • Multi-Finding Ticketing for ADO – Group multiple vulnerabilities in a single ticket for better workflow management. • Filter by Business Unit, CWE, Ownership, and Deployment Environment – Target vulnerabilities with precision using advanced filtering. Cyber Threat Intelligence & Security Enhancements • Cyber Threat Intelligence Premium – Access 128,000+ exploits for better exploitability and fixability metrics. • SBOM, Container SBOM & Open Source Artifact Analysis – Conduct deep security analysis with reachability insights. • Enhanced Lacework Container Management – Fetch and analyze running container details for better security reporting. • REST API Enhancements – Use asset tags for automated deployments and streamline security processes. Other Key Updates • CVE & CWE Columns Added – Compare vulnerabilities more effectively. • Custom Status Management for Findings – Personalize security workflows with custom status configurations. • Impact & Risk Explorer Side Panel – Gain heatmap-based insights into vulnerability distribution and team risk impact. 🚀 Stay ahead of vulnerabilities, optimize risk assessment, and enhance security efficiency with Phoenix Security’s latest features! 🚀
Alfonso Eusebio
Discover CVE-2025-30066 tj-actions/changed-files GitHub Action has been compromised, exposing secrets in CI/CD pipelines and posing a major software supply chain security risk. Attackers injected malicious code into all versions (V1–V45), repointing existing tags to a compromised commit that exfiltrated credentials via GitHub Actions logs. Immediate remediation is required—organizations must scan their repositories, rotate secrets, and replace the action to mitigate risk. Learn how Phoenix Security’s ASPM can automate threat detection and enhance GitHub Actions security.
Francesco Cipollone
Tired of scrambling every time a new zero-day hits the headlines? Discover a threat-centric approach to vulnerability management that tackles root causes head-on. Dive into real-world examples—like the notorious Log4j (CVE-2021-44228)—and learn how ASPM application security, cybersecurity best practices, and frameworks (CVE → CWE → CAPEC → MITRE ATT&CK) can streamline remediation. Whether it’s ransomware or unauthorized access attempts on QNAP devices, see how focusing on broad threat categories and root cause analysis can supercharge your defense strategy and minimize patch fatigue.
Francesco Cipollone
Derek

Derek Fisher

Head of product security at a global fintech

Derek Fisher – Head of product security at a global fintech. Speaker, instructor, and author in application security.

Derek is an award winning author of a children’s book series in cybersecurity as well as the author of “The Application Security Handbook.” He is a university instructor at Temple University where he teaches software development security to undergraduate and graduate students. He is a speaker on topics in the cybersecurity space and has led teams, large and small, at organizations in the healthcare and financial industries. He has built and matured information security teams as well as implemented organizational information security strategies to reduce the organizations risk.

Derek got his start in the hardware engineering space where he learned about designing circuits and building assemblies for commercial and military applications. He later pursued a computer science degree in order to advance a career in software development. This is where Derek was introduced to cybersecurity and soon caught the bug. He found a mentor to help him grow in cybersecurity and then pursued a graduate degree in the subject.

Since then Derek has worked in the product security space as an architect and leader. He has led teams to deliver more secure software in organizations from multiple industries. His focus has been to raise the security awareness of the engineering organization while maintaining a practice of secure code development, delivery, and operations.

In his role, Jeevan handles a range of tasks, from architecting security solutions to collaborating with Engineering Leadership to address security vulnerabilities at scale and embed security into the fabric of the organization.

Jeevan Singh

Jeevan Singh

Founder of Manicode Security

Jeevan Singh is the Director of Security Engineering at Rippling, with a background spanning various Engineering and Security leadership roles over the course of his career. He’s dedicated to the integration of security practices into software development, working to create a security-aware culture within organizations and imparting security best practices to the team.
In his role, Jeevan handles a range of tasks, from architecting security solutions to collaborating with Engineering Leadership to address security vulnerabilities at scale and embed security into the fabric of the organization.

James

James Berthoty

Founder of Latio Tech

James Berthoty has over ten years of experience across product and security domains. He founded Latio Tech to help companies find the right security tools for their needs without vendor bias.

christophe

Christophe Parisel

Senior Cloud Security Architect

Senior Cloud Security Architect

Chris

Chris Romeo

Co-Founder
Security Journey

Chris Romeo is a leading voice and thinker in application security, threat modeling, and security champions and the CEO of Devici and General Partner at Kerr Ventures. Chris hosts the award-winning “Application Security Podcast,” “The Security Table,” and “The Threat Modeling Podcast” and is a highly rated industry speaker and trainer, featured at the RSA Conference, the AppSec Village @ DefCon, OWASP Global AppSec, ISC2 Security Congress, InfoSec World and All Day DevOps. Chris founded Security Journey, a security education company, leading to an exit in 2022. Chris was the Chief Security Advocate at Cisco, spreading security knowledge through education and champion programs. Chris has twenty-six years of security experience, holding positions across the gamut, including application security, security engineering, incident response, and various Executive roles. Chris holds the CISSP and CSSLP certifications.

jim

Jim Manico

Founder of Manicode Security

Jim Manico is the founder of Manicode Security, where he trains software developers on secure coding and security engineering. Jim is also the founder of Brakeman Security, Inc. and an investor/advisor for Signal Sciences. He is the author of Iron-Clad Java: Building Secure Web Applications (McGraw-Hill), a frequent speaker on secure software practices, and a member of the JavaOne Rockstar speaker community. Jim is also a volunteer for and former board member of the OWASP foundation.

Join our Mailing list!

Get all the latest news, exclusive deals, and feature updates.

The IKIGAI concept
x  Powerful Protection for WordPress, from Shield Security
This Site Is Protected By
ShieldPRO