Invicti (incl. Acunetix)

Overview

Invicti is an application security company focused on dynamic application security testing (DAST), which tests running web applications and APIs from the outside. It states that more than 5,000 customers use it, that it has secured more than one million apps and APIs, and that it has more than 20 years of experience in runtime testing^[18]. Its Acunetix scanner has been renamed Invicti Web + API, with the company describing the product’s legacy as two decades of fast, accurate DAST^[19].

Invicti’s main differentiator is proof-based scanning, which attempts to confirm that a detected vulnerability is exploitable so that developers receive fewer false positives. The platform now consolidates DAST with code-to-runtime correlation and vulnerability management, and integrates with CI/CD tools such as Jenkins and CircleCI^[18][19]. It also offers an AI-driven “agentic pentester” that produces audit-ready reports in under 24 hours for US$500 or less^[18].

Invicti is privately held. Platform pricing is quote-based. It does not scan network infrastructure, so it is usually paired with a network scanner such as Nessus or Qualys.

Invicti (incl. Acunetix) features

• Dynamic testing of web apps and APIs
• Proof-based confirmation of findings
• Code-to-runtime correlation
• CI/CD integrations including Jenkins and CircleCI
• Agentic AI pentest reports
• Vulnerability management for AppSec findings

Invicti (incl. Acunetix) pricing

Quote-based platform licences. The AI pentest service is priced at US$500 or less per report.

Invicti (incl. Acunetix) strengths and limitations

Appears in

• Best Vulnerability Scanners in 2026 #10

Invicti (incl. Acunetix) alternatives and competitors

Alternatives to Invicti (incl. Acunetix): companies ranked in the same lists.

• Wiz
• Microsoft Power BI
• Tenable
• Rapid7
• QQualys
• Aqua Security Trivy
• Detectify
• Greenbone OPENVAS
• Intruder
• PortSwigger Burp Suite
• ProjectDiscovery Nuclei
• Snyk