What Kondukto is
Acquired by Invicti. Kondukto's strength is integrating with just about every tool you could want, including open source ones, to prioritize and remediate in a single platform. They provide a great Jira workflow for working through findings. The vendor site is kondukto.io. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Kondukto covers
Kondukto is in the catalog for these capabilities. Categories: ASPM and Vulnerability Management. Catalog tags: Best for MidMarket and Acquired.
How to evaluate Kondukto in a security program
Use Kondukto as a stack candidate, not as diligence evidence. The oneNorma score for Kondukto is 3.8/10 (percentile 9). If the real gap is in ASPM and Vulnerability Management, a dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what kondukto.io publishes. Contrast it with pentesting and Security Cloud & Compliance.
