Phoenix Security ASPM

Phoenix Security provides Application Security Posture Management (ASPM) and vulnerability management solutions designed to help organizations prioritize and contextualize security risks. The platform enables businesses to analyze threats and focus on vulnerabilities that pose the greatest risk to their operations, rather than attempting to address all findings equally.

The company's approach centers on helping security and development teams collaborate more effectively by reducing alert fatigue and preventing burnout. Their solution aggregates security findings from multiple sources into a unified backlog, allowing teams to make data-driven decisions about which vulnerabilities require immediate attention based on business context, exploitability, and reachability analysis.

Phoenix Security's platform integrates with existing security tools to provide centralized visibility across application security, cloud security, and operational security environments. The system applies contextual analysis to vulnerability data, considering factors such as whether code is actually reachable in production environments and the potential business impact of exploitation.

The company was founded by Francesco Cipollone, who previously led application security at HSBC and worked as a Senior Security Consultant at AWS. Phoenix Security maintains advisory boards comprising former executives from companies including Signal Sciences, Zscaler, Tanium, Digital Shadow, and Qualys, as well as security practitioners from organizations like Oracle, Google, and Miro. The company advocates for moving away from traditional SLA-based vulnerability management toward data-driven approaches that measure actual risk reduction.