Invicti Reviews

I primarily use Invicti for code scans to identify open vulnerabilities and secrets in the code. Different development teams working on various technology stacks rigorously use it to understand areas for improvement, focusing mainly on top critical or high-level vulnerabilities and their remediation suggestions. Invicti helps us prioritize the development team's efforts.

Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment. This feature helps us focus on priorities and prioritize the development team's effort, integrating seamlessly with DevOps to facilitate proactive scans of environments. Invicti also provides audit recommendations that are quite realistic, making it easy to discuss plans with developers.

We primarily use Invicti to scan and secure our website against vulnerabilities, ensuring compliance and reducing potential risks.

Invicti(Netsparker) has streamlined our security efforts by allowing seamless integration with tools like Jira, which improves team visibility, accountability, and collaboration. It has significantly improved how we identify, track, and remediate vulnerabilities.

We use this solution to initialize our applications before releasing them to our clients. The first step is deploying our application and scanning it using Invicti. We configure the scanner for our application’s specific server issues, types, and language. After the scan is complete, Invicti will identify any vulnerabilities. Once we have the scan results, we manually test them on-premises.

The best features of Invicti are its ability to confirm access vulnerabilities, SSL injection vulnerabilities, and its connectors to other security tools.

We use Netsparker by Invicti to run tests for application security based on OWASP Top 10.

The dashboard is really cool, and the features are really good. It tells you about the software version you're using in your web application. It gives you the entire technology stack, and that really helps. Both web and desktop apps are good in terms of application scanning. It has a lot of security checks that are easily customizable as per your requirements. It also has good customer support.

We use the solution for vulnerability testing. Our customers are in different industries, but we mainly focus on fintech companies, such as those in the financial sector.

It provides robust features. Invicti stands out in the future in proof-based scanning technology. They have built their own engine, which provides proof of their plight for identified vulnerabilities. They identify vulnerabilities and exploit them. The tool is capable of producing very few false positives.

It indicates the accuracy of the proof-based scanning. It detects a wide range of vulnerabilities.

The third one is integration and automation. It has very good integration with the CI/CD pipeline.

It is a perfect scalable tool for smaller companies and enterprises. The ease of use and reporting are both very good. Five to six features make Invictus stand out from other tools in the market.

We used Invicti to find vulnerabilities and ensure compliance with regulations like PCI DSS and GDPR. We also use it to fix vulnerabilities in web applications, prioritize our risks and get executive and detailed developer reports.

I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities.

It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms.

Reporting should be improved. The reporting options should be made better for end-users. Currently, it is possible, but it's not the best. Being able to choose what I want to see in my reports rather than being given prefixed information would make my life easier. I had to depend on the API for getting the content that I wanted. If they could fix the reporting feature to make it more comprehensive and user-friendly, it would help a lot of end-users. Everything else was good about this product.

My primary use of Invicti revolves around supporting my vulnerability testing efforts. As part of my role in overseeing security for various companies, Invicti aids in generating reports to bolster security measures.

I find the product's zero false positive feature quite valuable, as does its array of authentication options, which provide flexibility in testing various web applications.