Invicti Web + API
4.0 out of 5 starsAverage Ratings 0 Ratings
Average Ratings 1 Rating
Similar Products
-
Aikido SecurityAikido is the all-in-one security platform for development teams to secure their complete stack, from code to cloud. Aikido centralizes all code and cloud security scanners in one place. Aikido offers a range of powerful scanners including static code analysis (SAST), dynamic application security testing (DAST), container image scanning, and infrastructure-as-code (IaC) scanning. Aikido integrates AI-powered auto-fixing features, reducing manual work by automatically generating pull requests to resolve vulnerabilities and security issues. It also provides customizable alerts, real-time vulnerability monitoring, and runtime protection, enabling teams to secure their applications and infrastructure seamlessly.
-
ParasoftParasoft's mission is to provide automated testing solutions and expertise that empower organizations to expedite delivery of safe and reliable software. A powerful unified C and C++ test automation solution for static analysis, unit testing and structural code coverage, Parasoft C/C++test helps satisfy compliance with industry functional safety and security requirements for embedded software systems.
-
FerootFeroot Security is a global leader in AI-powered website and web application compliance and security. Feroot AI protects digital experiences from hidden threats while continuously enforcing compliance with PCI DSS 4.0.1, HIPAA rules on online tracking technologies, CCPA/CPRA, GDPR, CIPA, and over 50 global laws and standards. The Feroot AI Platform replaces manual compliance work and operational overhead with continuous automation. What once required months of effort across security, engineering, and legal teams can now be deployed in minutes, delivering real-time protection and audit-ready evidence. Feroot unifies critical capabilities into a single platform, including JavaScript behavior analysis, web compliance scanning, third-party script monitoring, consent enforcement, and data privacy posture management. It is purpose-built to detect and stop web-based threats such as Magecart, formjacking, e-skimming, and unauthorized tracking on high-risk assets like payment pages, login flows, iframes, and healthcare portals. Trusted by Fortune 500 enterprises, healthcare providers, retailers, SaaS platforms, utilities, payment service providers, universities, and public sector organizations, Feroot safeguards hundreds of millions of users worldwide. Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI. Visit feroot for more information.
-
Rocket z/Assure VAPYour mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks. Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points. Key benefits for your security team: - Identify and resolve hidden vulnerabilities with deep, automated scanning. - Protect your mission-critical data from evolving external and internal threats. - Streamline compliance reporting with clear, actionable security insights. Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
-
GearsetGearset is a full‑featured Salesforce DevOps solution built for the enterprise, giving teams the tools to adopt best practices across every stage of the DevOps lifecycle. From metadata and CPQ deployments to CI/CD, testing, code analysis, sandbox seeding, backups, archiving, and observability, Gearset gives teams unmatched insight and control over their Salesforce workflows. Over 3,000 organizations — including names like McKesson and IBM — rely on Gearset to deliver with security and scale in mind. With advanced governance, detailed audit trails, SOX/ISO/HIPAA support, multi‑team pipelines, integrated security checks, and adherence to ISO 27001, SOC 2, GDPR, CCPA/CPRA, and HIPAA, Gearset combines enterprise‑ready compliance with rapid onboarding and an intuitive interface — all in one platform. Leading firms in finance, healthcare, and tech trust Gearset to power their DevOps initiatives without adding complexity.
-
JscramblerJscrambler is the leader in Client-Side Security, protecting the code, data, and digital interactions that power today’s modern web applications. Modern applications are changing rapidly as development teams adopt AI-generated code, rely on third-party software components, and embed AI-powered agents into digital experiences. Meanwhile, sensitive information is increasingly created and processed in the browser itself. This creates a critical gap in enterprise security: organizations need to govern not only what code enters an application, but how that code, scripts, and data behave when the application runs. Jscrambler closes that gap with a Client-Side Security Platform built around its Behavioral Enforcement Core. The platform continuously monitors and enforces how application code, including AI-generated code, third-party scripts, AI agents, and sensitive data behave in the browser. By enforcing software integrity and data governance at runtime, Jscrambler gives organizations control at the point where code executes and data is created—before sensitive information can be exposed or transmitted. Organizations across retail, financial services, travel, healthcare, and other industries use Jscrambler to detect and stop client-side attacks, protect against risks introduced by AI-developed and third-party code, control AI-driven data flows, and strengthen compliance with requirements including PCI DSS, GDPR, HIPAA, CIPA, CCPA, and the EU AI Act.
-
FlagsmithFlagsmith gives software engineering teams a self-hosted or fully managed feature flagging platform for controlling releases across web, mobile, and backend systems. Ship code behind a flag, then decide who sees it — by environment, user, or custom segment — without redeploying. Run Flagsmith however fits your infrastructure: our managed cloud, your own private cloud, or fully on-premise. What you get: Progressive rollouts with one-click rollback if something breaks Live config changes — flip features on or off instantly, no redeploy required Segment-based A/B and multivariate testing Project and role-based access control for multi-team organizations Native integrations with the tools already in your stack MCP support and a CLI so AI agents and scripts can manage flags directly Open source at its core, Flagsmith is built for teams that want control over where their configuration data lives.
-
Virtuoso QAVirtuoso QA is a secure, agentic test automation platform for any browser-based application. Touchstone, our agentic assurance layer, turns your business requirements into tests, then runs, fixes and maintains them as your application changes. More than thirty specialised agents author, generate, triage and self-heal your functional and end-to-end tests, while a deterministic engine executes every run and your team approves every decision that matters. Every release comes with evidence of what was tested, what changed and who approved it. Release Insights shows execution risk and requirement coverage across every journey, and teams can export an Evidence Report in minutes rather than assembling one over weeks. That makes the platform a natural fit for regulated industries like financial services, insurance, healthcare, the public sector and more. The mission is to set the standard of proof for software releases. AI generates software. Virtuoso QA generates the evidence to trust it.
-
Astra PentestAstra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting. The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.
-
Auth0Auth0 takes a modern approach to Identity and enables organizations to provide secure access to any application, for any user. Auth0 is highly customizable, and simple yet flexible. Safeguarding billions of login transactions each month, Auth0 delivers convenience, privacy, and security so customers can focus on innovation. With Auth0, you can rapidly integrate authentication and authorization for web, mobile, and legacy applications, with new Fine Grained Authorization (FGA) that goes beyond role-based access control.
Description
Cyberlop serves as a robust platform for testing the security of web applications and APIs, catering to both product and security teams as well as security agencies. It offers testing capabilities in both black-box and grey-box modes, allowing for the analysis of live applications while also being able to inspect associated source code. Teams can create accounts for various user roles, enabling scans that evaluate authorization boundaries and determine access to pages, APIs, and data records. Confirmed vulnerabilities come with substantiated evidence, including request and response data, browser snapshots, and detailed information about the source code when it is accessible. Teams have the capability to re-execute tests after implementing changes, ensuring that any vulnerabilities are addressed. Cyberlop also includes features such as scheduled scanning, integration with CI/CD processes through an API and GitHub Actions template, repository linkages, access controls, and the ability to generate exportable reports. Importantly, testing necessitates authorization from the target owner. The platform is hosted and allows for a scanning agent to be deployed within a client's network, while maintaining the console and reporting functionalities in the cloud. This flexibility ensures that organizations can seamlessly adapt their security testing strategies to fit their specific environments.
Description
Invicti Web + API, previously known as Acunetix, is a DAST solution for discovering, testing, prioritizing, and managing vulnerabilities across web applications and APIs. The platform combines automated runtime scanning with AI-assisted security capabilities intended to bring automated testing closer to the depth of manual penetration testing. It can automatically discover web applications, APIs, shadow assets, unlinked pages, and undocumented endpoints across an organization's attack surface. Invicti detects more than 7,000 security issues, including OWASP Top 10, OWASP API Top 10, and business logic vulnerabilities. Testing capabilities cover single-page and JavaScript-heavy applications, LLM-powered services, authenticated user flows, multi-step application processes, and REST, GraphQL, and SOAP APIs. AI-driven risk scoring analyzes more than 200 signals, while runtime reachability, exploitability, and business context help teams determine which vulnerabilities should receive priority. Proof-based validation is designed to reduce false positives by confirming whether detected vulnerabilities are actually exploitable, with Invicti reporting 99.98% confirmation accuracy for exploitable vulnerabilities. DAST-to-SAST correlation can map vulnerabilities to source code, while AI-powered remediation provides developers with targeted guidance and automated validation retests fixes after remediation. Integrations with CI/CD, ticketing, development, and security systems help organizations incorporate continuous web and API security testing into existing software development workflows.
API Access
Has API
Yes
API Access
Has API
Yes
Screenshots View All
No images available
Integrations
GitHub
Yes
ArmorCode
No
Axonius
No
Azure Key Vault
Yes
Bizzy
No
Centraleyezer
No
CyberArk Workforce Identity
No
Flexagon
No
GitLab
Yes
Imperva DDoS Protection
No
Integrations
GitHub
Yes
ArmorCode
Yes
Axonius
Yes
Azure Key Vault
No
Bizzy
Yes
Centraleyezer
Yes
CyberArk Workforce Identity
Yes
Flexagon
Yes
GitLab
No
Imperva DDoS Protection
Yes
Pricing Details
$199/pilot
A 30-day pilot for one application is $199, credited toward an annual license if converted. Annual licenses are $699 per application, billed yearly, with unlimited scans; the founding rate is available through February 28, 2027 and is locked for two years from signing. From March 1, 2027, new annual licenses are $1,199 per application. Private agent execution is $944 per application per year. Prices exclude 18% GST for customers invoiced in India.
Free Trial
Yes
Free Version
No
Pricing Details
No price information available.
Free Trial
Yes
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Cyberlop Labs
Founded
2026
Country
India
Website
cyberlop.com
Vendor Details
Company Name
Invicti Security
Founded
2018
Country
United States
Website
acunetix.com
Product Features
Application Security
Analytics / Reporting
No
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
No
Training Resources
No
Vulnerability Detection
No
Vulnerability Remediation
No
Product Features
Application Security
Analytics / Reporting
Yes
Open Source Component Monitoring
No
Source Code Analysis
No
Third-Party Tools Integration
Yes
Training Resources
Yes
Vulnerability Detection
Yes
Vulnerability Remediation
Yes
Computer Security
Anti Spam
No
Antivirus
No
Audit Trail
Yes
Compliance Management
Yes
Database Security Audit
Yes
File Access Control
Yes
Financial Data Protection
No
Maintenance Scheduling
No
Real Time Monitoring
No
Security Event Log
No
Virus Definition Update
No
Vulnerability Protection
Yes
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
Yes
Incident Management
No
Tokenization
No
Vulnerability Scanning
Yes
Whitelisting / Blacklisting
No
IT Security
Anti Spam
No
Anti Virus
No
Email Attachment Protection
No
Event Tracking
No
IP Protection
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Spyware Removal
No
Two-Factor Authentication
No
Vulnerability Scanning
Yes
Web Threat Management
Yes
Web Traffic Reporting
No
Network Security
Access Control
No
Analytics / Reporting
No
Compliance Reporting
No
Firewalls
No
Internet Usage Monitoring
No
Intrusion Detection System
No
Threat Response
Yes
VPN
No
Vulnerability Scanning
Yes
Vulnerability Management
Asset Discovery
Yes
Asset Tagging
Yes
Network Scanning
Yes
Patch Management
No
Policy Management
No
Prioritization
Yes
Risk Management
Yes
Vulnerability Assessment
Yes
Web Scanning
Yes
Vulnerability Scanners
Asset Discovery
Yes
Black Box Scanning
Yes
Compliance Monitoring
Yes
Continuous Monitoring
Yes
Defect Tracking
Yes
Interactive Scanning
Yes
Logging and Reporting
Yes
Network Mapping
Yes
Perimeter Scanning
Yes
Risk Analysis
Yes
Threat Intelligence
Yes
Web Inspection
Yes
