Ratings and Reviews 1 Rating

Total
ease
features
design
support

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • Aikido Security Reviews & Ratings
    239 Ratings
    Company Website
  • Astra Pentest Reviews & Ratings
    295 Ratings
    Company Website
  • Feroot Reviews & Ratings
    32 Ratings
    Company Website
  • Cloudflare Reviews & Ratings
    2,042 Ratings
    Company Website
  • Rocket z/Assure VAP Reviews & Ratings
    1 Rating
    Company Website
  • Reflectiz Reviews & Ratings
    33 Ratings
    Company Website
  • Criminal IP ASM Reviews & Ratings
    21 Ratings
    Company Website
  • Orca Security Reviews & Ratings
    606 Ratings
    Company Website
  • Bitdefender Ultimate Small Business Security Reviews & Ratings
    5 Ratings
    Company Website
  • DriveStrike Reviews & Ratings
    24 Ratings
    Company Website

What is Invicti Web + API?

Invicti Web + API, formerly Acunetix, is a dynamic application security testing platform designed to automate vulnerability discovery, validation, prioritization, and remediation workflows for web applications and APIs. The product builds on more than 20 years of Acunetix DAST technology while incorporating AI, code-to-runtime correlation, and vulnerability management capabilities. Invicti can automatically identify web applications, APIs, shadow assets, unlinked pages, and undocumented endpoints across code, traffic, and runtime environments. Its scanning engine detects more than 7,000 security issues, including vulnerabilities from the OWASP Top 10 and OWASP API Top 10 as well as business logic flaws. The platform supports modern single-page applications, JavaScript-heavy websites, LLM-powered services, role-based authentication scenarios, complex multi-step workflows, and stateful API testing. API security testing covers REST, GraphQL, and SOAP services while maintaining context across requests. Invicti uses AI-driven risk scoring based on more than 200 signals together with runtime reachability, exploitability, and business context to help teams prioritize security findings. Proof-based validation confirms exploitable vulnerabilities to reduce false positives, with Invicti reporting 99.98% confirmation accuracy for exploitable findings. DAST-to-SAST correlation connects runtime vulnerabilities with corresponding source code, while AI-powered remediation delivers developer-oriented fix guidance and automated validation can retest applications after changes are implemented. Invicti also provides agentic penetration testing capabilities that coordinate specialized AI agents, adapt attack plans to application behavior, investigate chained and contextual vulnerabilities, and validate findings using its proof-based techniques.

What is ImmuniWeb?

ImmuniWeb is a global leader in application security, with its headquarters situated in Geneva, Switzerland, and primarily serves clients in sectors such as banking, healthcare, and e-commerce. The ImmuniWeb® AI Platform utilizes cutting-edge AI and Machine Learning technologies to enhance and automate processes related to Attack Surface Management and Dark Web Monitoring, cementing its status as a key player in the Application Penetration Testing industry, as noted in the MarketsandMarkets 2021 report. The company guarantees a contractually binding zero false-positives SLA backed by a money-back assurance, reflecting its commitment to quality and reliability. ImmuniWeb's innovative AI solutions have garnered numerous accolades, including recognition from Gartner as a Cool Vendor and an IDC Innovator, along with winning the “SC Award Europe” in the category of “Best Usage of Machine Learning and AI.” With over 100,000 tests conducted daily, the ImmuniWeb® Community Edition stands as one of the largest application security communities available, offering various free assessments such as the Website Security Test, SSL Security Test, Mobile App Security Test, and Dark Web Exposure Test. Furthermore, ImmuniWeb SA proudly holds both ISO 27001 certification and CREST accreditation, showcasing its dedication to maintaining high standards in security practices. The combination of these certifications and advanced technology positions ImmuniWeb as a reliable partner in the ever-evolving landscape of cybersecurity.

Media

Media

Integrations Supported

ArmorCode
Axonius
Bizzy
Centraleyezer
CyberArk Workforce Identity
Hexway Pentest Suite
Imperva DDoS Protection
Imperva WAF
Jira Work Management
Kondukto
NAVEX IRM
Phoenix Security
ThreadFix
WordPress

Integrations Supported

Barracuda CloudGen Firewall
Fortinet FortiWeb Web Application Firewall
Qualys TruRisk Platform
Qualys WAS

API Availability

Has API

API Availability

Has API

Pricing Information

Pricing not provided
Free Trial Offered?

Pricing Information

$499/month
From $499/month
Free Trial Offered?

Supported Platforms

SaaS
Windows
On-Prem
Linux

Supported Platforms

SaaS
Android
iPhone
iPad

Customer Service / Support

Standard Support
24 Hour Support
Web-Based Support

Customer Service / Support

24 Hour Support
Web-Based Support

Training Options

Documentation Hub
Webinars
Online Training

Training Options

Documentation Hub
Webinars
Online Training

Company Facts

Organization Name

Invicti Security

Date Founded

2018

Company Location

United States

Company Website

acunetix.com

Company Facts

Organization Name

ImmuniWeb

Date Founded

2019

Company Location

Switzerland

Company Website

www.immuniweb.com

Categories and Features

Application Security

Analytics / Reporting
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Computer Security

Audit Trail
Compliance Management
Database Security Audit
File Access Control
Vulnerability Protection

Cybersecurity

IOC Verification
Vulnerability Scanning

IP Scanners

Not specified

IT Security

Vulnerability Scanning
Web Threat Management

Network Security

Threat Response
Vulnerability Scanning

Penetration Testing

Not specified

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Prioritization
Risk Management
Vulnerability Assessment
Web Scanning

Vulnerability Scanners

Asset Discovery
Black Box Scanning
Compliance Monitoring
Continuous Monitoring
Defect Tracking
Interactive Scanning
Logging and Reporting
Network Mapping
Perimeter Scanning
Risk Analysis
Threat Intelligence
Web Inspection

Website Security

Not specified

Categories and Features

AI Pentesting

Not specified

API Security

Not specified

Application Security

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Audit

Compliance Management
Risk Assessment

Automated Testing

Security Testing

Cloud Security

Application Security
Behavioral Analytics
Threat Intelligence
Vulnerability Management

Cybersecurity

AI / Machine Learning
Behavioral Analytics
Endpoint Management
Incident Management
Vulnerability Scanning
Whitelisting / Blacklisting

IT Security

Intrusion Detection System
Spyware Removal
Vulnerability Scanning
Web Threat Management

Penetration Testing

Not specified

Vulnerability Management

Asset Discovery
Asset Tagging
Network Scanning
Patch Management
Risk Management
Vulnerability Assessment
Web Scanning

Popular Alternatives

Astra Pentest Reviews & Ratings

Astra Pentest

Astra Security

Popular Alternatives

Red Sift ASM Reviews & Ratings

Red Sift ASM

Red Sift
AppTrana Reviews & Ratings

AppTrana

Indusface
Invicti Reviews & Ratings

Invicti

Invicti Security