Invicti Web + API Reviews & Ratings

Invicti Web + API

4.0 out of 5 stars

Ratings and Reviews 1 Rating

Total 4 out of 5 stars
ease 5 out of 5 stars
features 5 out of 5 stars
design 4 out of 5 stars
support 4 out of 5 stars

Ratings and Reviews 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Aikido Security Reviews & Ratings
    4.6 out of 5 stars 364 Ratings
    Company Website for Aikido Security
  • Astra Pentest Reviews & Ratings
    4.6 out of 5 stars 296 Ratings
    Company Website for Astra Pentest
  • Feroot Reviews & Ratings
    4.9 out of 5 stars 33 Ratings
    Company Website for Feroot
  • Rocket z/Assure VAP Reviews & Ratings
    5.0 out of 5 stars 1 Rating
    Company Website for Rocket z/Assure VAP
  • Reflectiz Reviews & Ratings
    4.7 out of 5 stars 34 Ratings
    Company Website for Reflectiz
  • Criminal IP ASM Reviews & Ratings
    4.9 out of 5 stars 21 Ratings
    Company Website for Criminal IP ASM
  • Bitdefender Ultimate Small Business Security Reviews & Ratings
    5.0 out of 5 stars 5 Ratings
    Company Website for Bitdefender Ultimate Small Business Security
  • DriveStrike Reviews & Ratings
    4.8 out of 5 stars 25 Ratings
    Company Website for DriveStrike
  • ManageEngine Endpoint Central Reviews & Ratings
    4.6 out of 5 stars 3,347 Ratings
    Company Website for ManageEngine Endpoint Central
  • JDisc Discovery Reviews & Ratings
    4.8 out of 5 stars 30 Ratings
    Company Website for JDisc Discovery

What is Invicti Web + API?

Invicti Web + API, formerly Acunetix, is a dynamic application security testing platform designed to automate vulnerability discovery, validation, prioritization, and remediation workflows for web applications and APIs. The product builds on more than 20 years of Acunetix DAST technology while incorporating AI, code-to-runtime correlation, and vulnerability management capabilities. Invicti can automatically identify web applications, APIs, shadow assets, unlinked pages, and undocumented endpoints across code, traffic, and runtime environments. Its scanning engine detects more than 7,000 security issues, including vulnerabilities from the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. The platform supports modern single-page applications, JavaScript-heavy websites, LLM-powered services, role-based authentication scenarios, complex multi-step workflows, and stateful API testing. API security testing covers REST, GraphQL, and SOAP services while maintaining context across requests. Invicti uses AI-driven risk scoring based on more than 200 signals together with runtime reachability, exploitability, and business context to help teams prioritize security findings. Proof-based validation confirms exploitable vulnerabilities to reduce false positives, with Invicti reporting 99.98% confirmation accuracy for exploitable findings. DAST-to-SAST correlation connects runtime vulnerabilities with corresponding source code, while AI-powered remediation delivers developer-oriented fix guidance and automated validation can retest applications after changes are implemented. Invicti also provides agentic penetration testing capabilities that coordinate specialized AI agents, adapt attack plans to application behavior, investigate chained and contextual vulnerabilities, and validate findings using its proof-based techniques.

What is Cyberlop?

Cyberlop is a powerful platform designed for assessing the security of web applications and APIs, serving the needs of product teams, security professionals, and security organizations alike. It enables testing in both black-box and grey-box modes, permitting users to analyze live applications as well as review the relevant source code. Teams can set up accounts for different user roles, which facilitates scans that assess authorization boundaries and verify access to various pages, APIs, and data records. Identified vulnerabilities are provided with comprehensive evidence, such as request and response data, browser snapshots, and in-depth details about the source code when available. Moreover, teams can re-run tests after modifications, ensuring that any discovered vulnerabilities are resolved. Cyberlop also features scheduled scanning, integration with CI/CD workflows through an API and GitHub Actions templates, repository connections, access controls, and the functionality to create exportable reports. It is crucial to note that testing requires permission from the target owner. The platform is designed to be hosted while allowing a scanning agent to be installed within a client's infrastructure, all while keeping the console and reporting features in the cloud. This adaptability empowers organizations to effectively tailor their security testing approaches to meet their unique needs and environments. By combining robust testing capabilities with flexible deployment options, Cyberlop stands out as an essential tool for modern security assessments.

Media

Media

No images available

Integrations Supported

GitHub
ArmorCode
Axonius
Bizzy
CyberArk Workforce Identity
Dradis
Flexagon
Hexway Pentest Suite
Imperva CDN
Imperva DDoS Protection
Jira
Jira Work Management
Kondukto
NAVEX IRM
Nucleus
SecurityHQ
ThreatAdvisor
WordPress

Integrations Supported

GitHub
GitHub Actions
GitLab

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided
Free Trial Offered?

Pricing Information

$199/pilot
A 30-day pilot for one application is $199, credited toward an annual license if converted. Annual licenses are $699 per application, billed yearly, with unlimited scans; the founding rate is available through February 28, 2027 and is locked for two years from signing. From March 1, 2027, new annual licenses are $1,199 per application. Private agent execution is $944 per application per year. Prices exclude 18% GST for customers invoiced in India.
Free Trial Offered?

Supported Platforms

SaaS
Windows
On-Prem
Linux

Supported Platforms

SaaS
Mac
Linux

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

Standard Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training

Training Options

Documentation Hub

Company Facts

Organization Name

Invicti Security

Date Founded

2018

Company Location

United States

Company Website

acunetix.com

Company Facts

Organization Name

Cyberlop Labs

Date Founded

2026

Company Location

India

Company Website

cyberlop.com

Categories and Features

Application Security

Analytics / Reporting
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Computer Security

Audit Trail
Compliance Management
Database Security Audit
File Access Control
Vulnerability Protection

Cybersecurity

IOC Verification
Vulnerability Scanning

IP Scanners

Not specified

IT Security

Vulnerability Scanning
Web Threat Management

Network Security

Threat Response
Vulnerability Scanning

Penetration Testing

Not specified

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Website Security

Not specified

Categories and Features

Popular Alternatives

Astra Pentest Reviews & Ratings

Astra Pentest

Astra Security
4.6 out of 5 stars

Popular Alternatives

No Alternatives
Crashtest Security Reviews & Ratings

Crashtest Security

4.6 out of 5 stars
AppTrana Reviews & Ratings

AppTrana

Indusface
5.0 out of 5 stars
Invicti Reviews & Ratings

Invicti

Invicti Security
4.8 out of 5 stars