Invicti Web + API

Invicti Web + API

Invicti Security
+
+
Visit Website

About

Invicti Web + API, formerly Acunetix, is a dynamic application security testing (DAST) platform for identifying and validating vulnerabilities across web applications, APIs, and other runtime assets. The platform automatically discovers applications, APIs, shadow assets, unlinked pages, and undocumented endpoints while supporting modern JavaScript applications and authenticated workflows. Its scanning engine detects more than 7,000 types of security issues, including vulnerabilities covered by the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. Invicti combines AI-driven risk scoring with runtime reachability, exploitability, and business context to help security teams prioritize vulnerabilities that represent demonstrable risk.

About

Source Defense is a mission critical element of web security designed to protect data at the point of input. The Source Defense Platform provides a simple and effective solution for data security and data privacy compliance – addressing threats and risks originating from the increased use of JavaScript, third-party vendors, and open-source code in your web properties. The Platform provides options for securing your own code, as well as addressing a ubiquitous gap in the management of third-party digital supply chain risk – controlling the actions of the third-party, fourth and nth party JavaScript that powers your site experience. The Source Defense Platform protects against all forms of client-side security incidents – keylogging, formjacking, digital skimming, Magecart, etc. – by extending web security beyond the server to the client-side (the browser).

Platforms Supported

Windows Supported
Mac Not Supported
Linux Supported
Cloud Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Application security teams, security engineers, penetration testers, DevSecOps teams, developers, CISOs, vulnerability management teams, and enterprises that need automated DAST, API security testing, vulnerability validation, prioritization, and remediation across modern web applications and APIs

Audience

Compliance, Security, Cyber Security, Risk, Security Operations, Senior Management, QSAs, ISAs, PCI DSS

Support

Phone Support Supported
24/7 Live Support Supported
Online Supported

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Supported

Pricing

Contact Us for Pricing
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 4.0 / 5
ease 5.0 / 5
features 5.0 / 5
design 4.0 / 5
support 4.0 / 5

Reviews/Ratings

Pros & Cons from Real Users

Pros

  • It is the most advanced automated web scanner. The vulnerability management feature works very well. The results are very accurate.

Cons

  • I have not found any cons until now. It works great.

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Not Supported

Training

Documentation Not Supported
Webinars Supported
Live Online Supported
In Person Supported

Company Information

Invicti Security
Founded: 2018
United States
acunetix.com

Company Information

Source Defense
Founded: 2014
United States, Israel
sourcedefense.com

Alternatives

Astra Pentest

Astra Pentest

Astra Security

Alternatives

Feroot

Feroot

Feroot Security
AppTrana

AppTrana

Indusface
Invicti

Invicti

Invicti Security
PT Application Inspector

PT Application Inspector

Positive Technologies

Categories

Categories

Application Security Features

Analytics / Reporting Supported
Open Source Component Monitoring Not Supported
Source Code Analysis Not Supported
Third-Party Tools Integration Supported
Training Resources Supported
Vulnerability Detection Supported
Vulnerability Remediation Supported

Computer Security Features

Anti Spam Not Supported
Antivirus Not Supported
Audit Trail Supported
Compliance Management Supported
Database Security Audit Supported
File Access Control Supported
Financial Data Protection Not Supported
Maintenance Scheduling Not Supported
Real Time Monitoring Not Supported
Security Event Log Not Supported
Virus Definition Update Not Supported
Vulnerability Protection Supported

Cybersecurity Features

AI / Machine Learning Not Supported
Behavioral Analytics Not Supported
Endpoint Management Not Supported
Incident Management Not Supported
IOC Verification Supported
Tokenization Not Supported
Vulnerability Scanning Supported
Whitelisting / Blacklisting Not Supported

IT Security Features

Anti Spam Not Supported
Anti Virus Not Supported
Email Attachment Protection Not Supported
Event Tracking Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Not Supported
IP Protection Not Supported
Spyware Removal Not Supported
Two-Factor Authentication Not Supported
Vulnerability Scanning Supported
Web Threat Management Supported
Web Traffic Reporting Not Supported

Network Security Features

Access Control Not Supported
Analytics / Reporting Not Supported
Compliance Reporting Not Supported
Firewalls Not Supported
Internet Usage Monitoring Not Supported
Intrusion Detection System Not Supported
Threat Response Supported
VPN Not Supported
Vulnerability Scanning Supported

Vulnerability Management Features

Asset Discovery Supported
Asset Tagging Supported
Network Scanning Supported
Patch Management Not Supported
Policy Management Not Supported
Prioritization Supported
Risk Management Supported
Vulnerability Assessment Supported
Web Scanning Supported

Vulnerability Scanners Features

Asset Discovery Supported
Black Box Scanning Supported
Compliance Monitoring Supported
Continuous Monitoring Supported
Defect Tracking Supported
Interactive Scanning Supported
Logging and Reporting Supported
Network Mapping Supported
Perimeter Scanning Supported
Risk Analysis Supported
Threat Intelligence Supported
Web Inspection Supported

Data Privacy Management Features

Access Control Not Supported
CCPA Compliance Supported
Consent Management Not Supported
Data Mapping Not Supported
GDPR Compliance Supported
Incident Management Not Supported
PIA / DPIA Not Supported
Policy Management Supported
Risk Management Not Supported
Sensitive Data Identification Supported

Data Security Features

Alerts / Notifications Supported
Antivirus/Malware Detection Not Supported
At-Risk Analysis Not Supported
Audits Not Supported
Data Center Security Not Supported
Data Classification Not Supported
Data Discovery Not Supported
Data Loss Prevention Not Supported
Data Masking Supported
Data-Centric Security Not Supported
Database Security Not Supported
Encryption Not Supported
Identity / Access Management Not Supported
Logging / Reporting Supported
Mobile Data Security Not Supported
Monitor Abnormalities Supported
Policy Management Supported
Secure Data Transport Not Supported
Sensitive Data Compliance Supported

PCI Compliance Features

Access Control Not Supported
Compliance Reporting Supported
Exceptions Management Not Supported
File Integrity Monitoring Not Supported
Intrusion Detection System Not Supported
Log Management Not Supported
Patch Management Not Supported
PCI Assessment Supported
Policy Management Supported

Integrations

ArmorCode Supported
Axonius Supported
Bizzy Supported
Centraleyezer Supported
CyberArk Workforce Identity Supported
Dradis Supported
Flexagon Supported
Hexway Pentest Suite Supported
Imperva CDN Supported
Jenkins Supported
Jira Work Management Supported
Kondukto Supported
NAVEX IRM Supported
Nucleus Supported
Phoenix Security Supported
Scuba Database Vulnerability Scanner Supported
SecurityHQ Supported
ThreadFix Supported
ThreatAdvisor Supported

Integrations

ArmorCode Not Supported
Axonius Not Supported
Bizzy Not Supported
Centraleyezer Not Supported
CyberArk Workforce Identity Not Supported
Dradis Not Supported
Flexagon Not Supported
Hexway Pentest Suite Not Supported
Imperva CDN Not Supported
Jenkins Not Supported
Jira Work Management Not Supported
Kondukto Not Supported
NAVEX IRM Not Supported
Nucleus Not Supported
Phoenix Security Not Supported
Scuba Database Vulnerability Scanner Not Supported
SecurityHQ Not Supported
ThreadFix Not Supported
ThreatAdvisor Not Supported
Claim Invicti Web + API and update features and information
Claim Invicti Web + API and update features and information