Invicti

Application security platform built around a DAST scanner, adding SAST, SCA and API security.

PaidPenetration testing tools

Updated Nov 8, 2026 · AppBreakup editorial · Web, Self-hosted

Visit Invicti See 5 alternatives

Is Invicti free?

No, it's a paid product

Agentic pentest price:: $500 max per pentest
Trial:: Proof-of-concept licences

Checked on Invicti's site Nov 8, 2026

3 alternatives with a free option Full Invicti pricing and plans

Switch from Invicti to

All 5

Acunetix
Agentic Pentest plan: $500 max per pentest
Burp Suite
Starting price: $499 (Burp Suite Professional)
ZAP
Open source

Verified facts: 5 of 5
Alternatives ranked: 5
Approved reviews: 0
Visits sent from here: 0

About Invicti

Invicti is an application security testing platform for organisations with many web apps and APIs to protect. Its base is a dynamic (DAST) scanner, formerly sold as Netsparker, that crawls running applications and confirms many vulnerabilities with proof-based checks so developers get fewer false positives. Higher packages add static code analysis, open-source dependency scanning, secrets detection, container and infrastructure-as-code scanning, and posture management that ties findings across tools together. Invicti also sells agentic pentests for single applications, with a published per-test price cap. Most plans run in Invicti's cloud, while the top AppSec Flex package adds on-premises and air-gapped deployment. The company also owns Acunetix, now renamed Invicti Web + API, which is the lighter scanner-only option. Main pricing is quote-based and Invicti offers proof-of-concept licences before purchase. It is built for security and DevSecOps teams in mid-sized and large companies rather than individual testers.

Best for: AppSec teams in larger companies that want DAST, SAST and SCA results in one place.

Invicti pricing (checked Nov 8, 2026)

Each line is quoted from Invicti's own site, with the page it came from.

Plan or term	What it says	Checked	Source
Agentic pentest price	$500 max per pentest	Nov 8, 2026	invicti.com
Trial	Proof-of-concept licences	Nov 8, 2026	invicti.com
Free trial	Proof-of-concept licences	Nov 8, 2026	invicti.com

Full Invicti pricing and cheaper alternatives

What works

Proof-based DAST that cuts false positives
Adds SAST, SCA, secrets and container scanning in higher tiers
On-premises and air-gapped deployment available
Agentic pentest option with a published price cap

Why people leave

Main platform pricing is quote-only
On-premises deployment only in the top package
More platform than small teams need for basic scanning

Invicti vs Acunetix, Burp Suite and ZAP

From each app's listing and the prices verified on its own site. A dash means we haven't verified it yet.

Attribute	Invicti	Acunetix	Burp Suite	ZAP
Pricing	Paid	Paid	Free plan + paid	Open source
Verified price	$500 max per pentest	$500 max per pentest	$499 (Burp Suite Professional)	—
Free plan	No	No	Yes, Community Edition	Free app
Open source	No	No	No	Yes
Self-hostable	No	No	No	No
Platforms	Web, Self-hosted	Web	Windows, macOS, Linux	Windows, macOS, Linux

Top Invicti alternatives

See all 5

1
Acunetix
Same vendor's lighter scanner-only product, simpler for smaller teams.
68.8
2
Burp Suite
Preferred by hands-on testers, with Burp Suite DAST for automated scanning at scale.
64.8
3
ZAP
Free open-source DAST for teams willing to script and maintain scans themselves.
61.8
4
Detectify
Cloud-only external scanning with published plan prices and hacker-sourced tests.
59.4
5
Intruder
Cheaper hosted scanning of web apps plus infrastructure and cloud, with a free tier.
57.5

Why people left Invicti

In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.

No switching stories yet. If you moved away from Invicti, review the app you switched to and tell us why.

Reviews

No approved reviews yet. How we verify reviewers

Write a review of Invicti

Your rating of Invicti

Name

Never shown publicly. A work email helps us verify you.

Title

Your review

What did you use it for, and what was good or bad? At least 40 characters.

Did you switch from another app?

Why did you leave it?

How can we verify you use it? (optional)

A GitHub username, your company domain, or say you can send a screenshot. Verified reviews count more.

I received money, credit or a gift for writing this review. (Incentivized reviews are shown but don't count toward rankings.)

By submitting, you confirm you're at least 16 and agree to our terms. Your name, rating, review and the date are published; your email isn't. See our privacy policy.

Invicti: common questions

What is Invicti?

Invicti: Application security platform built around a DAST scanner, adding SAST, SCA and API security. Best for appSec teams in larger companies that want DAST, SAST and SCA results in one place. Available for Web, and you can host it yourself.

Is Invicti free?

No, Invicti is a paid product. Agentic pentest price: $500 max per pentest (checked on Invicti's own site).

How much does Invicti cost?

Invicti is a paid product. Agentic pentest price: $500 max per pentest; Trial: Proof-of-concept licences; Free trial: Proof-of-concept licences. Checked on Invicti's own site, November 2026.

Does Invicti have a free trial or refund?

Trial: Proof-of-concept licences. Free trial: Proof-of-concept licences. Source: Invicti's own site.

Is Invicti open source?

No, Invicti is not open source. Open-source alternatives include ZAP.

What platforms does Invicti run on?

Invicti is available for Web and Self-hosted.

What are the best alternatives to Invicti?

The highest-ranked Invicti alternatives right now are Acunetix, Burp Suite and ZAP. See the full ranked list for pricing, platforms and verified facts.

Invicti vs Acunetix: what's the difference?

Both Invicti and Acunetix are paid products. Verified prices: Invicti $500 max per pentest, Acunetix $500 max per pentest. Both run on Web.

See all 5 Invicti alternatives

Invicti facts

5 of 5 verified

Agentic pentest price: $500 max per pentest; Checked Nov 8, 2026invicti.com(opens source in a new tab); “$500 max per pentest”
On-premises deployment: AppSec Flex package; Checked Nov 8, 2026invicti.com(opens source in a new tab); “Cloud hosting is available with Invicti packages, while AppSec Flex includes additional deployment options such as on-premises”
Trial: Proof-of-concept licences; Checked Nov 8, 2026invicti.com(opens source in a new tab); “Invicti provides proof-of-concept licenses”
Capabilities: DAST, SAST, SCA, API security; Checked Nov 8, 2026invicti.com(opens source in a new tab); “Depending on the package you select, Invicti can provide DAST, API security and discovery, SAST, SCA”
Free trial: Proof-of-concept licences; Checked Nov 8, 2026invicti.com(opens source in a new tab); “Invicti provides proof-of-concept licenses so you can evaluate”