--- title: Invicti Reviews meta_title: 'Invicti Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 72 reviews by the users' company size, role or industry to find out how Invicti works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 72 scale: '5' date_modified: '2026-08-14' parent_category: name: "DevSecOps\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t" url: https://www.g2.com/categories/devsecops --- # Invicti Reviews **Vendor:** Invicti Security **Category:** [Dynamic Application Security Testing (DAST) Software](https://www.g2.com/categories/dynamic-application-security-testing-dast) **Average Rating:** 4.5/5.0 **Total Reviews:** 72 ## About Invicti Invicti (formerly known as Netsparker) is an enterprise application and API security testing platform that helps organizations secure thousands of web applications and APIs at scale while dramatically reducing the risk of attack. Combining advanced DAST and IAST capabilities in a single platform, Invicti enables security teams to continuously identify, prioritize, and remediate vulnerabilities across complex modern environments with confidence and automation. With Invicti, security teams can: - Automate application security testing workflows and save hundreds of hours every month - Discover and secure all web applications and APIs, including forgotten, unmanaged, and shadow assets - Deliver actionable, developer-friendly feedback that helps teams remediate vulnerabilities faster and build more secure code over time - Reduce false positives with proof-based scanning technology that validates exploitable vulnerabilities - Scale application security programs across large enterprises without slowing development teams - Integrate security seamlessly into existing DevSecOps and CI/CD workflows Built for organizations with the most demanding security requirements, Invicti empowers teams to confidently secure their entire attack surface with accuracy, scalability, and automation. ## Invicti Pros & Cons **What users like:** - Users highlight the **ease of use** of Invicti, appreciating its user-friendly setup and quick installation process. (9 reviews) - Users value the **efficient scanning technology** of Invicti, enhancing workflow with hassle-free monthly website tests. (7 reviews) - Users commend Invicti's **accurate vulnerability detection and excellent integration with DevOps tools** , enhancing their security testing efficiency. (6 reviews) - Users value the **high-quality reporting** of Invicti, making it ideal for certifications and simplifying compliance processes. (6 reviews) - Users value the **effective vulnerability detection** of Invicti, appreciating its ease of use and accurate reporting. (6 reviews) - Users value the **effective vulnerability identification** of Invicti, highlighting its accuracy and minimal false positives. (6 reviews) - Users appreciate the **accuracy of results** from Invicti, consistently identifying real vulnerabilities without excessive false positives. (5 reviews) - Users appreciate the **excellent customer support** from Invicti, enhancing their overall experience and relationship with the product. (5 reviews) - Users value the **automated scanning** feature of Invicti, enabling quick and accurate web application vulnerability assessments. (4 reviews) - Easy Integrations (4 reviews) **What users dislike:** - Users find the **customer support lacking** , with slow responses and inadequate solutions for technical issues. (3 reviews) - Users experience **slow performance** during scans, setup, and upgrades, impacting the overall efficiency of Invicti. (3 reviews) - Users find that **slow scanning** can hinder efficiency, especially when setup is tricky and API scanning is limited. (3 reviews) - Users face **API issues** with Invicti, making it unsuitable for scanning purposes despite good support. (2 reviews) - Users find the **complex setup** challenging initially, impacting their experience before they can effectively utilize the product. (2 reviews) - Users experience **inefficient scanning** that can be slow, with setup challenges and limitations in API scanning functionality. (2 reviews) - Scanning Issues (2 reviews) - Setup Complexity (2 reviews) - Technical Issues (2 reviews) - Complexity (1 reviews) ## Invicti Reviews ### 1. Absolutely Love This Software! **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** October 21, 2025 **What do you like best about Invicti?** I like that Invicti’s super accurate and easy to use it finds real issues without all the false alarms and fits right into our workflow. **What do you dislike about Invicti?** Sometimes the scans can take a while, and the setup’s a bit tricky at first but once it’s running, it does a solid job **What problems is Invicti solving and how is that benefiting you?** This tool saves us a significant amount of time and helps keep our apps much more secure, eliminating the need for constant manual checks. ### 2. Wins in comparison to other products in the market **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** April 03, 2025 **What do you like best about Invicti?** Simple API integration, Ability to schedule scans & report valuable vulnerabilities removing noise in the process **What do you dislike about Invicti?** Could be more faster in customer support and product upgrades **What problems is Invicti solving and how is that benefiting you?** Ability to keep the external and internal attack surface in check by identifying vulnerabilities that come from Secure SDLC practices not being followed ### 3. All in one vulnerability scanner **Rating:** 5.0/5.0 stars **Reviewed by:** Bala K. | Technician, Small-Business (50 or fewer emp.) **Reviewed Date:** May 31, 2023 **What do you like best about Invicti?** Invicti which is Netsparker provided me major vulnerability database to find remote execution vulnerability, domain invalidation and manay vulnerability patches which allows me to find cve score as well. Recurrent scanning provides me to fetch files at integrity level. **What do you dislike about Invicti?** Sometimes it failes to fetch database which is at server end and back end level. Merely connects to internet at that point of time. Apart from that there is no issues with it. **What problems is Invicti solving and how is that benefiting you?** Netsparker helps me to find the best reports with moderate scanning where other open source tools take time to evaluate or enumerate the bugs. After reporting it helps to patch the final accuracy of false positive after report preparation. ## Invicti Discussions - [What are URL rewrites and URL rewrite rules?](https://www.g2.com/discussions/netsparker-web-application-security-scanner-96cf6c3d-02fc-4405-a800-e28a0f893517) - 1 comment, 1 upvote - [What is the Knowledge base node and what is reported in it?](https://www.g2.com/discussions/netsparker-web-application-security-scanner) - 1 comment, 1 upvote - [How Does Netsparker Integrate with Your Existing SDLC?](https://www.g2.com/discussions/netsparker-scanners-faqs-e4a57e60-032c-4486-a798-94cc2b423ed8) - 1 comment, 1 upvote - [What are the Plans & Editions of Netsparker?](https://www.g2.com/discussions/netsparker-scanners-faqs-7c0a080f-a51b-479a-9fd4-47828171f241) - 1 comment, 1 upvote - [What are the different vulnerability severities in Netsparker?](https://www.g2.com/discussions/netsparker-scanners-faqs-66ea9a44-4a58-48dd-aef2-97c87db1a5cc) - 1 comment, 1 upvote - [View Invicti pricing details and edition comparison](https://www.g2.com/products/invicti/reviews?filters%5Bsentiment_snippet%5D=2008988&qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-08-14+22%3A05%3A50+-0500&secure%5Bsession_id%5D=ac88f86e-4124-4d45-a7d1-6c4c00fcfbe8&secure%5Btoken%5D=26b7669c78300df1cc8b1da34ca798dc389c6696bd453bbff25c27f9a61c5b76&format=llm_user) ## Invicti Integrations - [Basil](https://www.g2.com/products/coraltree-basil/reviews) ## Invicti Features **Administration** - Content Delivery - Dashboard & Reporting - Alerting **Administration** - API - Extensibility - Reporting and Analytics **Administration** - API / Integrations - Extensibility **Administration** - API / Integrations - Extensibility **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans - Anomaly/Malware Detection **Functionality - Software Composition Analysis ** - Language Support - Integration - Transparency **Risk management - Application Security Posture Management (ASPM)** - Vulnerability Management - Risk Assessment and Prioritization - Compliance Management - Policy Enforcement **Agentic AI - Static Code Analysis** - Adaptive Learning - Natural Language Interaction - Proactive Assistance **Cloud Visibility** - Data Discovery **Risk Analysis** - Vulnerability Assessment - Security Auditing - Web-Application Security **Analysis** - Issue Tracking - Reconnaissance - Vulnerability Scan - Compliance Management - Automatic Scans - SPA Scans **Analysis** - Real-Time Analytics - Issue Tracking - Static Code Analysis - Code Analysis - Integrated Development Environment **Analysis** - Reporting and Analytics - Issue Tracking - Vulnerability Scan - Code Analysis **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring - Vulnerability Scanning - Source-Code Scanning - Web Scanning **Effectiveness - Software Composition Analysis** - Remediation Suggestions - Continuous Monitoring - Thorough Detection **Security Testing** - API Testing **Integration and efficiency - Application Security Posture Management (ASPM)** - Integration with Development Tools - Automation and Efficiency **Security** - Real-Time Data - Cloud Application Security - SSL Security **Threat Protection** - Firewall - Anomaly/Malware Detection - Endpoint Protection **Testing** - Command-Line Tools - Manual Testing - Test Automation - Performance and Reliability **Testing** - Command-Line Tools - Manual Testing - Test Automation - Compliance Testing - Source-Code Scanning - Detection Rate - False Positives - Multi-Language Scanning **Testing** - Manual Testing - Test Automation - Compliance Testing - Black-Box Scanning - Detection Rate - False Positives **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing - Risk Analysis **Security Management** - Security and Policy Enforcement **Reporting and Analytics - Application Security Posture Management (ASPM)** - Trend Analysis - Risk Scoring - Customizable Dashboards **Agentic AI - Interactive Application Security Testing (IAST)** - Autonomous Task Execution **Identity** - SSO - Governance - User Analytics - Real-Time Analytics - Visual Analytics - Reporting/Analytics **Generative AI** - Generative AI **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Agentic AI - Static Application Security Testing (SAST)** - Autonomous Task Execution **Agentic AI - Application Security Posture Management (ASPM)** - Autonomous Task Execution - Multi-step Planning **Additional Functionality** - Alerts/Notifications - AI Copilot - Access Controls/Permissions - Endpoint Management - Intrusion Detection System - Compliance Management - HIPAA Compliant - Search/Filter - API - Two-Factor Authentication - Data Visualization - Risk Assessment - Real-Time Monitoring - Event Logs - Activity Dashboard - Audit Management - Cloud Security Policy Management - Vulnerability Protection - Anti Virus - Incident Management - Threat Intelligence - Real-Time Reporting - Reporting & Statistics - User Management - Encryption - Vulnerability Scanning - Generative AI - Status Tracking - Third-Party Integrations - Real-Time Notifications - Patch Management - Monitoring - Cloud Encryption **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security - Runtime Container Security - Asset Discovery - Threat Intelligence - Vulnerability Protection - Alerts/Notifications - Vulnerability/Threat Prioritization - Generative AI - SQL Injections - Real-Time Analytics - Threat Protection - Web-Application Security - Password Protection - Website Crawling - Vulnerability Assessment **Additional Functionality** - Network Mapping - Activity Dashboard - SQL Injections - Audit Management - Threat Intelligence - Assignment Management - Integration Management - User Management - Asset Discovery - Remediation Management - Vulnerability Scanning - Generative AI - Multi-User Collaboration - AI Copilot - Web-Application Security - Vulnerability Assessment - Security Auditing - Runtime Container Security - Network Scanning - Password Cracking - Simulated Threat Attacks - Certificates - Alerts/Notifications - Real-Time Data - Cross-Site Scripting - Exploit Frameworks **Additional Functionality** - Debugging - Generative AI - AI Copilot - For Developers - Deployment Management - Application Security - Dashboard **Additional Functionality** - SQL Injections - Load Balancing - Alerts/Notifications - Vulnerability Scanning - Threat Response - API - Log Management - AI Copilot ## Top Invicti Alternatives - [Intruder](https://www.g2.com/products/intruder/reviews) - 4.8/5.0 (209 reviews) - [Veracode Application Security Platform](https://www.g2.com/products/veracode-application-security-platform/reviews) - 3.8/5.0 (25 reviews) - [Tenable Nessus](https://www.g2.com/products/tenable-nessus/reviews) - 4.5/5.0 (291 reviews)