Link copied to clipboard

# Invicti vs ZAP by Checkmarx Comparison - What are their main differences?

Share
[
Export
](/compare/invicti/zap-by-checkmarx/export.csv)

InvictiZAP by Checkmarx[+ Add Product](#)

Reviews

**Invicti** [

4.5/5(72)

](https://www.g2.com/products/invicti/reviews#reviews)

**ZAP by Checkmarx** [

4.7/5(14)

](https://www.g2.com/products/zap-by-checkmarx/reviews#reviews)

Pricing

**Invicti**
No pricing available

**ZAP by Checkmarx**
Free Trial

**Free** · Open source

**Pricing Insights**
from reviews

Time to Implement

**Invicti**
1 month

Based on 5 responses

**ZAP by Checkmarx**
Not enough reviews yet

Return on Investment

**Invicti**
14 months

Based on 5 responses

**ZAP by Checkmarx**
Not enough reviews yet

Perceived Cost

**Invicti**
$$$$$

**ZAP by Checkmarx**
Not enough reviews yet

Average Discount

**Invicti**
12%

**ZAP by Checkmarx**
Not enough reviews yet

Pros & Cons

**Invicti**
[
Ease of Use (9)
](https://www.g2.com/products/invicti/reviews?filters%5Bsentiment_snippet%5D=1804614&qs=pros-and-cons#reviews)[
Scanning Technology (7)
](https://www.g2.com/products/invicti/reviews?filters%5Bsentiment_snippet%5D=1804583&qs=pros-and-cons#reviews)[
Poor Customer Support (3)
](https://www.g2.com/products/invicti/reviews?filters%5Bsentiment_snippet%5D=2079828&qs=pros-and-cons#reviews)[
Slow Performance (3)
](https://www.g2.com/products/invicti/reviews?filters%5Bsentiment_snippet%5D=2008988&qs=pros-and-cons#reviews)

**ZAP by Checkmarx**
[
Ease of Use (6)
](https://www.g2.com/products/zap-by-checkmarx/reviews?filters%5Bsentiment_snippet%5D=1459519&qs=pros-and-cons#reviews)[
Automation (5)
](https://www.g2.com/products/zap-by-checkmarx/reviews?filters%5Bsentiment_snippet%5D=1459578&qs=pros-and-cons#reviews)[
False Positives (3)
](https://www.g2.com/products/zap-by-checkmarx/reviews?filters%5Bsentiment_snippet%5D=1459527&qs=pros-and-cons#reviews)[
Poor Documentation (2)
](https://www.g2.com/products/zap-by-checkmarx/reviews?filters%5Bsentiment_snippet%5D=1459568&qs=pros-and-cons#reviews)

Integrations

**Invicti**
[

 ![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_bc99f506b44844e9593a0996875114cd/coraltree-basil.png "Product Avatar Image")

Basil

](https://www.g2.com/products/coraltree-basil/reviews)[
View all
](https://www.g2.com/products/invicti/integrations)

**ZAP by Checkmarx**
Not enough data

Screenshots

**Invicti**
 ![Invicti screenshot](https://images.g2crowd.com/cdn-cgi/image/width=600,height=600,fit=scale-down,format=auto,onerror=redirect,/https://images.g2crowd.com/uploads/attachment/file/1763281/Screenshot-2026-05-18-at-3.55.13-PM.png)

**ZAP by Checkmarx**
No screenshot available

Ratings

Meets Requirements

**Invicti**

9.1

9.160

**ZAP by Checkmarx**

9.6

9.612

Ease of Use

**Invicti**

9.1

9.160

**ZAP by Checkmarx**

9.0

9.012

Ease of Setup

**Invicti**

9.1

9.150

**ZAP by Checkmarx**
Not enough data

Ease of Admin

**Invicti**

9.2

9.247

**ZAP by Checkmarx**
Not enough data

Quality of Support

**Invicti**

8.9

8.960

**ZAP by Checkmarx**

8.1

8.112

Has the product been a good partner in doing business?

**Invicti**

9.6

9.645

**ZAP by Checkmarx**
Not enough data

Product Direction (% positive)

**Invicti**

10.0

10.055

**ZAP by Checkmarx**

10.0

10.011

Features

Penetration Testing[Hide 39 FeaturesShow 39 Features](javascript:void(0);)

8.7

21

8.4

13

Administration

API

8.2

14

8.3(won by 0.1)

12

Extensibility

8.3

13

8.8(won by 0.5)

12

 (There is a greater than 0.5 difference between this product's rating and its competitors)

Reporting and Analytics

9.1(won by 0.3)

18

8.8

12

Analysis

Issue Tracking

8.4(won by 0.3)

15

8.1

12

Reconnaissance

9.0(won by 0.8)

17

 (There is a greater than 0.5 difference between this product's rating and its competitors)

8.2

12

Vulnerability Scan

9.7(won by 0.3)

18

9.4

12

Compliance Management

Not enough data

Not enough data

Automatic Scans

Not enough data

Not enough data

SPA Scans

Not enough data

Not enough data

Testing

Command-Line Tools

7.6(tied score)

12

7.6(tied score)

12

Manual Testing

8.6(won by 1.1)

15

 (There is a greater than 0.5 difference between this product's rating and its competitors)

7.5

12

Test Automation

9.0(won by 0.4)

18

8.6

12

Performance and Reliability

9.1(won by 0.2)

18

8.9

12

Additional Functionality

Network Mapping

Not enough data

Not enough data

Activity Dashboard

Not enough data

Not enough data

SQL Injections

Not enough data

Not enough data

Audit Management

Not enough data

Not enough data

Threat Intelligence

Not enough data

Not enough data

Assignment Management

Not enough data

Not enough data

Integration Management

Not enough data

Not enough data

User Management

Not enough data

Not enough data

Asset Discovery

Not enough data

Not enough data

Remediation Management

Not enough data

Not enough data

Vulnerability Scanning

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

Multi-User Collaboration

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Web-Application Security

Not enough data

Not enough data

Vulnerability Assessment

Not enough data

Not enough data

Security Auditing

Not enough data

Not enough data

Runtime Container Security

Not enough data

Not enough data

Network Scanning

Not enough data

Not enough data

Password Cracking

Not enough data

Not enough data

Simulated Threat Attacks

Not enough data

Not enough data

Certificates

Not enough data

Not enough data

Alerts/Notifications

Not enough data

Not enough data

Real-Time Data

Not enough data

Not enough data

Cross-Site Scripting

Not enough data

Not enough data

Exploit Frameworks

Not enough data

Not enough data

Website Security[Hide 22 FeaturesShow 22 Features](javascript:void(0);)

8.9

26

Not enough data

Administration

Content Delivery

8.7(won by default)

18

Not enough data

Dashboard & Reporting

9.5(won by default)

22

Not enough data

Alerting

9.0(won by default)

22

Not enough data

Risk Analysis

Vulnerability Assessment

9.3(won by default)

23

Not enough data

Security Auditing

9.2(won by default)

23

Not enough data

Blacklist and Whitelist

Feature Not Available

Not enough data

Web-Application Security

Not enough data

Not enough data

Threat Protection

Firewall

7.9(won by default)

13

Not enough data

Anomaly/Malware Detection

8.2(won by default)

14

Not enough data

DDoS Protection

Feature Not Available

Not enough data

Malware Removal

Feature Not Available

Not enough data

Endpoint Protection

Not enough data

Not enough data

Generative AI

AI Text Summarization

Feature Not Available

Not enough data

Generative AI

Not enough data

Not enough data

Additional Functionality

SQL Injections

Not enough data

Not enough data

Load Balancing

Not enough data

Not enough data

Alerts/Notifications

Not enough data

Not enough data

Vulnerability Scanning

Not enough data

Not enough data

Threat Response

Not enough data

Not enough data

API

Not enough data

Not enough data

Log Management

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Dynamic Application Security Testing (DAST)[Hide 13 FeaturesShow 13 Features](javascript:void(0);)

8.4

31

Not enough data

Administration

API / Integrations

8.2(won by default)

21

Not enough data

Extensibility

8.3(won by default)

20

Not enough data

Analysis

Reporting and Analytics

9.0(won by default)

29

Not enough data

Issue Tracking

9.2(won by default)

26

Not enough data

Vulnerability Scan

9.4(won by default)

30

Not enough data

Code Analysis

7.6(won by default)

18

Not enough data

Static Code Analysis

Feature Not Available

Not enough data

Testing

Manual Testing

7.1(won by default)

19

Not enough data

Test Automation

8.5(won by default)

24

Not enough data

Compliance Testing

8.5(won by default)

24

Not enough data

Black-Box Scanning

9.2(won by default)

22

Not enough data

Detection Rate

8.6(won by default)

22

Not enough data

False Positives

7.5(won by default)

22

Not enough data

Vulnerability Scanner[Hide 58 FeaturesShow 58 Features](javascript:void(0);)

8.6

21

Not enough data

Performance

Issue Tracking

8.6(won by default)

18

|

Verified

Not enough data

Detection Rate

9.0(won by default)

19

|

Verified

Not enough data

False Positives

8.0(won by default)

21

|

Verified

Not enough data

Automated Scans

9.1(won by default)

19

|

Verified

Not enough data

Anomaly/Malware Detection

Not enough data

Not enough data

Network

Compliance Testing

8.7(won by default)

14

|

Verified

Not enough data

Perimeter Scanning

8.6(won by default)

11

|

Verified

Not enough data

Configuration Monitoring

8.3(won by default)

11

|

Verified

Not enough data

Vulnerability Scanning

Not enough data

Not enough data

Source-Code Scanning

Not enough data

Not enough data

Web Scanning

Not enough data

Not enough data

Application

Manual Application Testing

8.2(won by default)

15

Not enough data

Static Code Analysis

8.2(won by default)

15

|

Verified

Not enough data

Black Box Testing

9.2(won by default)

18

|

Verified

Not enough data

Risk Analysis

Not enough data

Not enough data

Agentic AI - Vulnerability Scanner

Autonomous Task Execution

Not enough data

Not enough data

Proactive Assistance

Not enough data

Not enough data

Additional Functionality

SSL Security

Not enough data

Not enough data

HIPAA Compliant

Not enough data

Not enough data

API

Not enough data

Not enough data

Threat Response

Not enough data

Not enough data

Endpoint Protection

Not enough data

Not enough data

Maintenance Scheduling

Not enough data

Not enough data

Third-Party Integrations

Not enough data

Not enough data

Security Auditing

Not enough data

Not enough data

Application Security

Not enough data

Not enough data

Encryption

Not enough data

Not enough data

Network Security

Not enough data

Not enough data

Real-Time Reporting

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Reporting/Analytics

Not enough data

Not enough data

Authentication

Not enough data

Not enough data

Financial Data Protection

Not enough data

Not enough data

Anti Virus

Not enough data

Not enough data

Secure Data Storage

Not enough data

Not enough data

Virus Definition Update

Not enough data

Not enough data

Activity Dashboard

Not enough data

Not enough data

VPN

Not enough data

Not enough data

Audit Trail

Not enough data

Not enough data

Anti Spam

Not enough data

Not enough data

Access Controls/Permissions

Not enough data

Not enough data

Data Visualization

Not enough data

Not enough data

Alerts/Escalation

Not enough data

Not enough data

Data Security

Not enough data

Not enough data

Runtime Container Security

Not enough data

Not enough data

Asset Discovery

Not enough data

Not enough data

Threat Intelligence

Not enough data

Not enough data

Vulnerability Protection

Not enough data

Not enough data

Alerts/Notifications

Not enough data

Not enough data

Vulnerability/Threat Prioritization

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

SQL Injections

Not enough data

Not enough data

Real-Time Analytics

Not enough data

Not enough data

Threat Protection

Not enough data

Not enough data

Web-Application Security

Not enough data

Not enough data

Password Protection

Not enough data

Not enough data

Website Crawling

Not enough data

Not enough data

Vulnerability Assessment

Not enough data

Not enough data

Show 7 feature categories with incomplete data

Static Application Security Testing (SAST)[Hide 23 FeaturesShow 23 Features](javascript:void(0);)

Not enough data

Not enough data

Administration

API / Integrations

Not enough data

Not enough data

Extensibility

Not enough data

Not enough data

Analysis

Real-Time Analytics

Not enough data

Not enough data

Issue Tracking

Not enough data

Not enough data

Static Code Analysis

Not enough data

Not enough data

Code Analysis

Not enough data

Not enough data

Integrated Development Environment

Not enough data

Not enough data

Testing

Command-Line Tools

Not enough data

Not enough data

Manual Testing

Not enough data

Not enough data

Test Automation

Not enough data

Not enough data

Compliance Testing

Not enough data

Not enough data

Source-Code Scanning

Not enough data

Not enough data

Detection Rate

Not enough data

Not enough data

False Positives

Not enough data

Not enough data

Multi-Language Scanning

Not enough data

Not enough data

Agentic AI - Static Application Security Testing (SAST)

Autonomous Task Execution

Not enough data

Not enough data

Additional Functionality

Debugging

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

For Developers

Not enough data

Not enough data

Deployment Management

Not enough data

Not enough data

Application Security

Not enough data

Not enough data

Dashboard

Not enough data

Not enough data

Software Composition Analysis[Hide 6 FeaturesShow 6 Features](javascript:void(0);)

Not enough data

Not enough data

Functionality - Software Composition Analysis 

Language Support

Not enough data

Not enough data

Integration

Not enough data

Not enough data

Transparency

Not enough data

Not enough data

Effectiveness - Software Composition Analysis

Remediation Suggestions

Not enough data

Not enough data

Continuous Monitoring

Not enough data

Not enough data

Thorough Detection

Not enough data

Not enough data

API Security[Hide 10 FeaturesShow 10 Features](javascript:void(0);)

Not enough data

Not enough data

API Management 

API Discovery

Feature Not Available

Not enough data

API Monitoring

Feature Not Available

Not enough data

Reporting

Feature Not Available

Not enough data

Change Management

Feature Not Available

Not enough data

Security Testing

Compliance Monitoring

Feature Not Available

Not enough data

API Verification

Feature Not Available

Not enough data

API Testing

Not enough data

Not enough data

Security Management

Security and Policy Enforcement

Not enough data

Not enough data

Anomoly Detection

Feature Not Available

Not enough data

Bot Detection

Feature Not Available

Not enough data

Application Security Posture Management (ASPM)[Hide 11 FeaturesShow 11 Features](javascript:void(0);)

Not enough data

Not enough data

Risk management - Application Security Posture Management (ASPM)

Vulnerability Management

Not enough data

Not enough data

Risk Assessment and Prioritization

Not enough data

Not enough data

Compliance Management

Not enough data

Not enough data

Policy Enforcement

Not enough data

Not enough data

Integration and efficiency - Application Security Posture Management (ASPM)

Integration with Development Tools

Not enough data

Not enough data

Automation and Efficiency

Not enough data

Not enough data

Reporting and Analytics - Application Security Posture Management (ASPM)

Trend Analysis

Not enough data

Not enough data

Risk Scoring

Not enough data

Not enough data

Customizable Dashboards

Not enough data

Not enough data

Agentic AI - Application Security Posture Management (ASPM)

Autonomous Task Execution

Not enough data

Not enough data

Multi-step Planning

Not enough data

Not enough data

Static Code Analysis[Hide 3 FeaturesShow 3 Features](javascript:void(0);)

Not enough data

Not enough data

Agentic AI - Static Code Analysis

Adaptive Learning

Not enough data

Not enough data

Natural Language Interaction

Not enough data

Not enough data

Proactive Assistance

Not enough data

Not enough data

Cloud Security[Hide 48 FeaturesShow 48 Features](javascript:void(0);)

Not enough data

Not enough data

Cloud Visibility

Data Discovery

Not enough data

Not enough data

Cloud Registry

Not enough data

Not enough data

Cloud Gap Analytics

Not enough data

Not enough data

Security

Data Security

Not enough data

Not enough data

Data loss Prevention

Not enough data

Not enough data

Security Auditing

Not enough data

Not enough data

Real-Time Data

Not enough data

Not enough data

Cloud Application Security

Not enough data

Not enough data

SSL Security

Not enough data

Not enough data

Identity

SSO

Not enough data

Not enough data

Governance

Not enough data

Not enough data

User Analytics

Not enough data

Not enough data

Real-Time Analytics

Not enough data

Not enough data

Visual Analytics

Not enough data

Not enough data

Reporting/Analytics

Not enough data

Not enough data

Additional Functionality

Alerts/Notifications

Not enough data

Not enough data

AI Copilot

Not enough data

Not enough data

Access Controls/Permissions

Not enough data

Not enough data

Endpoint Management

Not enough data

Not enough data

Intrusion Detection System

Not enough data

Not enough data

Compliance Management

Not enough data

Not enough data

HIPAA Compliant

Not enough data

Not enough data

Search/Filter

Not enough data

Not enough data

API

Not enough data

Not enough data

Two-Factor Authentication

Not enough data

Not enough data

Data Visualization

Not enough data

Not enough data

Risk Assessment

Not enough data

Not enough data

Real-Time Monitoring

Not enough data

Not enough data

Event Logs

Not enough data

Not enough data

Activity Dashboard

Not enough data

Not enough data

Audit Management

Not enough data

Not enough data

Cloud Security Policy Management

Not enough data

Not enough data

Vulnerability Protection

Not enough data

Not enough data

Anti Virus

Not enough data

Not enough data

Incident Management

Not enough data

Not enough data

Threat Intelligence

Not enough data

Not enough data

Real-Time Reporting

Not enough data

Not enough data

Reporting & Statistics

Not enough data

Not enough data

User Management

Not enough data

Not enough data

Encryption

Not enough data

Not enough data

Vulnerability Scanning

Not enough data

Not enough data

Generative AI

Not enough data

Not enough data

Status Tracking

Not enough data

Not enough data

Third-Party Integrations

Not enough data

Not enough data

Real-Time Notifications

Not enough data

Not enough data

Patch Management

Not enough data

Not enough data

Monitoring

Not enough data

Not enough data

Cloud Encryption

Not enough data

Not enough data

Interactive Application Security Testing (IAST)[Hide 1 FeatureShow 1 Feature](javascript:void(0);)

Not enough data

Not enough data

Agentic AI - Interactive Application Security Testing (IAST)

Autonomous Task Execution

Not enough data

Not enough data

User Insights

Reviewers' Company Size

[![Invicti](https://images.g2crowd.com/uploads/product/hd_favicon/3bee4d2b732dab5368b9a8aa21f05e30/invicti.svg "Invicti")](https://www.g2.com/products/invicti/reviews)

Invicti

Small-Business(50 or fewer emp.)

22.1%

Mid-Market(51-1000 emp.)

30.9%

Enterprise(\> 1000 emp.)

47.1%

[![ZAP by Checkmarx](https://images.g2crowd.com/uploads/product/hd_favicon/846d9e925f3777d617abc9156230d88f/zap-by-checkmarx.svg "ZAP by Checkmarx")](https://www.g2.com/products/zap-by-checkmarx/reviews)

ZAP by Checkmarx

Small-Business(50 or fewer emp.)

76.9%

Mid-Market(51-1000 emp.)

7.7%

Enterprise(\> 1000 emp.)

15.4%

Small-Business

(50 or fewer emp.)

22.1%

76.9%

Mid-Market

(51-1000 emp.)

30.9%

7.7%

Enterprise

(\> 1000 emp.)

47.1%

15.4%

Reviewers' Industry

[![Invicti](https://images.g2crowd.com/uploads/product/hd_favicon/3bee4d2b732dab5368b9a8aa21f05e30/invicti.svg "Invicti")](https://www.g2.com/products/invicti/reviews)
Invicti

Computer Software

12.1%

Telecommunications

10.6%

Financial Services

9.1%

Information Technology and Services

9.1%

Computer & Network Security

6.1%

Other

53.0%

[![ZAP by Checkmarx](https://images.g2crowd.com/uploads/product/hd_favicon/846d9e925f3777d617abc9156230d88f/zap-by-checkmarx.svg "ZAP by Checkmarx")](https://www.g2.com/products/zap-by-checkmarx/reviews)
ZAP by Checkmarx

Computer & Network Security

41.7%

Information Technology and Services

25.0%

Computer Software

16.7%

Internet

8.3%

Hospital & Health Care

8.3%

Other

0.0%

Alternatives

**Invicti Alternatives**

 ![Intruder](https://images.g2crowd.com/uploads/product/hd_favicon/1539808658/intruder.svg "Intruder")

[
Intruder
](/products/intruder/reviews)

 ![Veracode Application Security Platform](https://images.g2crowd.com/uploads/product/hd_favicon/d30c215643c0b745ba4951ab20b60121/veracode-application-security-platform.svg "Veracode Application Security Platform")

[
Veracode Application...
](/products/veracode-application-security-platform/reviews)

 ![Tenable Nessus](https://images.g2crowd.com/uploads/product/hd_favicon/127e03b7d601741c15306f07b0f8cf84/tenable-nessus.svg "Tenable Nessus")

[
Tenable Nessus
](/products/tenable-nessus/reviews)

 ![HCL AppScan](https://images.g2crowd.com/uploads/product/hd_favicon/29b6f6f7723fdb127f6c9c54b9dd756f/hcl-appscan.svg "HCL AppScan")

[
HCL AppScan
](/products/hcl-appscan/reviews)

**ZAP by Checkmarx Alternatives**

 ![Astra Pentest](https://images.g2crowd.com/uploads/product/hd_favicon/f04194bbb96125a9c3dd43547c09aac3/astra-pentest.svg "Astra Pentest")

[
Astra Pentest
](/products/astra-pentest/reviews)

 ![GitLab](https://images.g2crowd.com/uploads/product/hd_favicon/2397ccd7309ef2bca71e3a275d59a5a3/gitlab.svg "GitLab")

[
GitLab
](/products/gitlab/reviews)

 ![Tenable Nessus](https://images.g2crowd.com/uploads/product/hd_favicon/127e03b7d601741c15306f07b0f8cf84/tenable-nessus.svg "Tenable Nessus")

[
Tenable Nessus
](/products/tenable-nessus/reviews)

 ![Harness Platform](https://images.g2crowd.com/uploads/product/hd_favicon/475270ef4d082eb00bedc920f653506d/harness-platform.svg "Harness Platform")

[
Harness Platform
](/products/harness-platform/reviews)

## Invicti vs ZAP by Checkmarx

- Reviewers felt that ZAP by Checkmarx meets the needs of their business better than Invicti.
- When comparing quality of ongoing product support, reviewers felt that Invicti is the preferred option.
- When assessing product direction, Invicti and ZAP by Checkmarx received similar ratings from our reviewers.