Try our new research platform with insights from 80,000+ expert users

Pros & Cons summary

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.
Get the report

Prominent pros & cons

PROS

Invicti excels in scanning capabilities and offers a unique crawling feature compared to other similar scanners.
Its scanning process does not heavily impact network resources, allowing seamless operation.
Invicti demonstrates a high level of accuracy and a quick scanning process, making it a reliable tool for vulnerability identification.
The platform integrates effectively with CI/CD pipelines, enhancing proactive vulnerability detection during deployment or code push.
Invicti stands out in reducing false positives and verifying vulnerabilities, significantly improving security testing efficiency.

CONS

Invicti's reporting capabilities require improvement for more comprehensive and user-friendly options.
The higher-level vulnerabilities, such as Cross-Site Scripting and SQL Injection, are challenging to highlight.
Licensing is tied to URLs, which proves costly and restrictive, especially for scanning different domains.
The scanning time is lengthy compared to other DAST tools, which affects usability.
Support, documentation, and multi-factor authentication support need enhancement.
 

Invicti Pros review quotes

it_user696993 - PeerSpot reviewer
Senior Information Security Consultant at a tech services company
Jul 5, 2017
Its ability to crawl a web application is quite different than another similar scanner.
it_user700140 - PeerSpot reviewer
Ex Senior Security Analyst and Onsite consultant at Paladion Networks
Dec 11, 2017
The scanner is light on the network and does not impact the network when scans are running.
it_user701418 - PeerSpot reviewer
Security Analyst with 1,001-5,000 employees
Jul 12, 2017
The scanner and the result generator are valuable features for us.
Learn what your peers think about Invicti. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,310 professionals have used our research since 2012.
it_user702261 - PeerSpot reviewer
Manager Compliance - Processes / InfoSec. at a tech services company with 201-500 employees
Jul 13, 2017
Scan, proxify the application, and then detailed report along with evidence and remediations to problems.
it_user494973 - PeerSpot reviewer
Software Quality Assurance Engineer at ITONICS GmbH
Dec 18, 2017
When we try to manually exploit the vulnerabilities, it often takes time to realize what's going on and what needs to be done.
NY
Attack Developer at a tech vendor
Aug 31, 2018
Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface.
IB
Security Specialist at Alfa-A IT
Jul 10, 2019
It correctly parses DOM and JS and has really good support for URL Rewrite rules, which is important for today's websites.
PD
Founder at a tech services company with self employed
Aug 21, 2019
One of the features I like about this program is the low number of false positives and the support it offers.
it_user1188708 - PeerSpot reviewer
Senior Quality Control Manager at a insurance company with 51-200 employees
Nov 14, 2019
The most attractive feature was the reporting review tool. The reporting review was very impressive and produced very fruitful reports.
reviewer1286490 - PeerSpot reviewer
Consultant Cyber Security at a tech services company with 51-200 employees
Oct 4, 2020
This tool is really fast and the information that they provide on vulnerabilities is pretty good.
 

Invicti Cons review quotes

it_user696993 - PeerSpot reviewer
Senior Information Security Consultant at a tech services company
Jul 5, 2017
Maybe the ability to make a good reporting format is needed.
it_user700140 - PeerSpot reviewer
Ex Senior Security Analyst and Onsite consultant at Paladion Networks
Dec 11, 2017
The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker.
it_user701418 - PeerSpot reviewer
Security Analyst with 1,001-5,000 employees
Jul 12, 2017
The support's response time could be faster since we are in different time zones.
Learn what your peers think about Invicti. Get advice and tips from experienced pros sharing their opinions. Updated: December 2025.
879,310 professionals have used our research since 2012.
it_user702261 - PeerSpot reviewer
Manager Compliance - Processes / InfoSec. at a tech services company with 201-500 employees
Jul 13, 2017
I think that it freezes without any specific reason at times. This needs to be looked into.
it_user494973 - PeerSpot reviewer
Software Quality Assurance Engineer at ITONICS GmbH
Dec 18, 2017
It would be better for listing and attacking Java-based web applications to exploit vulnerabilities.
NY
Attack Developer at a tech vendor
Aug 31, 2018
The custom attack preparation screen might be improved.
IB
Security Specialist at Alfa-A IT
Jul 10, 2019
The scanner itself should be improved because it is a little bit slow.
PD
Founder at a tech services company with self employed
Aug 21, 2019
Netsparker doesn't provide the source code of the static application security testing.
it_user1188708 - PeerSpot reviewer
Senior Quality Control Manager at a insurance company with 51-200 employees
Nov 14, 2019
The proxy review, the use report views, the current use tool and the subset requests need some improvement. It was hard to understand how to use them.
reviewer1286490 - PeerSpot reviewer
Consultant Cyber Security at a tech services company with 51-200 employees
Oct 4, 2020
Right now, they are missing the static application security part, especially web application security.