We performed a comparison between Invicti and OWASP Zap based on real PeerSpot user reviews.
Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."This tool is really fast and the information that they provide on vulnerabilities is pretty good."
"The dashboard is really cool, and the features are really good. It tells you about the software version you're using in your web application. It gives you the entire technology stack, and that really helps. Both web and desktop apps are good in terms of application scanning. It has a lot of security checks that are easily customizable as per your requirements. It also has good customer support."
"Scan, proxify the application, and then detailed report along with evidence and remediations to problems."
"I like that it's stable and technical support is great."
"One of the features I like about this program is the low number of false positives and the support it offers."
"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."
"Its ability to crawl a web application is quite different than another similar scanner."
"The best features of Invicti are its ability to confirm access vulnerabilities, SSL injection vulnerabilities, and its connectors to other security tools."
"The ZAP scan and code crawler are valuable features."
"ZAP is easy to use. The automated scan is a powerful feature. You can simulate attacks with various parameters. ZAP integrates well with SonarQube."
"The solution is good at reporting the vulnerabilities of the application."
"The vulnerabilities that it finds, because the primary goal is to secure applications and websites."
"The community edition updates services regularly. They add new vulnerabilities into the scanning list."
"The product discovers more vulnerabilities compared to other tools."
"It can be used effectively for internal auditing."
"The most valuable feature is scanning the URL to drill down all the different sites."
"The solution needs to make a more specific report."
"Reporting should be improved. The reporting options should be made better for end-users. Currently, it is possible, but it's not the best. Being able to choose what I want to see in my reports rather than being given prefixed information would make my life easier. I had to depend on the API for getting the content that I wanted. If they could fix the reporting feature to make it more comprehensive and user-friendly, it would help a lot of end-users. Everything else was good about this product."
"Invicti takes too long with big applications, and there are issues with the login portal."
"The scannings are not sufficiently updated."
"The support's response time could be faster since we are in different time zones."
"Netsparker doesn't provide the source code of the static application security testing."
"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."
"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."
"There isn't too much information about it online."
"There are too many false positives."
"They stopped their support for a short period. They've recently started to come back again. In the early days, support was much better."
"The ability to search the internet for other use cases and to use the solution to make applications more secure should be addressed."
"The solution is unable to customize reports."
"It would be nice to have a solid SQL injection engine built into Zap."
"It needs more robust reporting tools."
"Deployment is somewhat complicated."
Invicti is ranked 15th in Static Application Security Testing (SAST) with 25 reviews while OWASP Zap is ranked 7th in Static Application Security Testing (SAST) with 37 reviews. Invicti is rated 8.2, while OWASP Zap is rated 7.6. The top reviewer of Invicti writes "A customizable security testing solution with good tech support, but the price could be better". On the other hand, the top reviewer of OWASP Zap writes "Great for automating and testing and has tightened our security ". Invicti is most compared with Acunetix, PortSwigger Burp Suite Professional, Qualys Web Application Scanning, Veracode and Fortify WebInspect, whereas OWASP Zap is most compared with SonarQube, Acunetix, Qualys Web Application Scanning, PortSwigger Burp Suite Professional and HCL AppScan. See our Invicti vs. OWASP Zap report.
See our list of best Static Application Security Testing (SAST) vendors.
We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.