Invicti vs Rapid7 AppSpider comparison

Invicti

Read 26 Invicti reviews

3,804 Views
1,947 Comparison Views

96% willing to recommend

Rapid7 AppSpider

Read 13 Rapid7 AppSpider reviews

1,234 Views
912 Comparison Views

100% willing to recommend

Invicti

Rapid7 AppSpider

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Invicti and Rapid7 AppSpider based on real PeerSpot user reviews.

Find out in this report how the two Static Application Security Testing (SAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed Invicti vs. Rapid7 AppSpider Report (Updated: May 2024).

Buyer's Guide

Invicti vs. Rapid7 AppSpider

May 2024

Download the complete report

Helped 787,817 peers since 2012

Categories and Ranking

Invicti

Ranking in Static Application Security Testing (SAST)

15th

Average Rating

8.2

Number of Reviews

Ranking in other categories

Application Security Tools (20th)

Rapid7 AppSpider

Ranking in Static Application Security Testing (SAST)

26th

Average Rating

7.8

Number of Reviews

Ranking in other categories

No ranking in other categories

Mindshare comparison

As of June 2024, in the Static Application Security Testing (SAST) category, the mindshare of Invicti is 1.1%, down from 1.4% compared to the previous year. The mindshare of Rapid7 AppSpider is 0.4%, down from 0.7% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Static Application Security Testing (SAST)

Unique Categories:

Application Security Tools

1.2%

No other categories found

Featured Reviews

Amr Abdelnaser

Senior Information Security Analyst at EastNets Holding Ltd.

Aug 14, 2023

A safe solution used to detective vulnerabilities for dynamic and complex testing

We use this solution to initialize our applications before releasing them to our clients. The first step is deploying our application and scanning it using Invicti. We configure the scanner for our application’s specific server issues, types, and language. After the scan is complete, Invicti will…

Read full review

Andrei Bigdan

Executive Manager at B2B-Solutions LLC

May 4, 2023

Useful vulnerability reporting data, flexible, and simple implementation

I am using Rapid7 AppSpider for vulnerability assessment The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The platform is stable."

"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."

"One of the features I like about this program is the low number of false positives and the support it offers."

"I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities."

"The most attractive feature was the reporting review tool. The reporting review was very impressive and produced very fruitful reports."

"When we try to manually exploit the vulnerabilities, it often takes time to realize what's going on and what needs to be done."

"The dashboard is really cool, and the features are really good. It tells you about the software version you're using in your web application. It gives you the entire technology stack, and that really helps. Both web and desktop apps are good in terms of application scanning. It has a lot of security checks that are easily customizable as per your requirements. It also has good customer support."

"The most valuable feature of Invicti is getting baseline scanning and incremental scan."

More Invicti pros

"The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate all the reports exactly what we want in a flexible way."

"I like the ability the product has to detect vulnerabilities quickly, when it has been released in our environment, then displaying them to us."

"Rapid7 AppSpider is good at managing different applications. It uses applets and generates reports to cover the PCA/GDPR compliance requirements."

"AppSpider's most valuable feature is reporting - everything is stored in the local database so it can be sent to other machines."

"When it is set up properly, it can do scanning on web apps with multiple engines automatically."

"The entire solution is interactive and has a point-and-click user experience, which makes it easy to find items or drill down on information. You don't need specialized skills to use the product."

"The most valuable feature is the reporting, which is compliant with international standards."

"It is really accurate and the rate of false positives is very low."

More Rapid7 AppSpider pros

Cons

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"Netsparker doesn't provide the source code of the static application security testing."

"The solution's false positive analysis and vulnerability analysis libraries could be improved."

"They could enhance the support for data swap testing for the platform."

"The licensing model should be improved to be more cost-effective. There are URL restrictions that consume our license. Compared to other DAST solutions and task tools like WebInspect and Burp Enterprise, Invicti is very expensive. The solution’s scanning time is also very long compared to other DAST tools. It might be due to proof-based scanning."

"The custom attack preparation screen might be improved."

"I think that it freezes without any specific reason at times. This needs to be looked into."

"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."

More Invicti cons

"The tech support is responsive but issues remain unresolved."

"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."

"AppSpider could improve in the area of integration. They need to add more integration opportunities."

"The product needs to be able to scale for large companies, like ours. We have millions of IP addresses that need to be scanned, and the scalability is not great."

"Support response times are slow and can be improved."

"It needs better integration with mobile applications."

"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."

"There are some glitches with stability, and it is an area for improvement."

More Rapid7 AppSpider cons

Pricing and Cost Advice

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"OWASP Zap is free and it has live updates, so that's a big plus."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"The price should be 20% lower"

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"It is competitive in the security market."

More Invicti pricing and cost advice

"The price is pretty fair."

"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."

"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."

"AppSpider is closed-source software and you need to acquire a license in order to use it."

"The licensing cost depends on the number of users."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

787,817 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Educational Organization

52%

Financial Services Firm

Computer Software Company

Manufacturing Company

Computer Software Company

17%

Financial Services Firm

15%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate ...

See all answers

What do you like most about Invicti?

The most valuable feature of Invicti is getting baseline scanning and incremental scan.

See all answers

What needs improvement with Invicti?

The solution's false positive analysis and vulnerability analysis libraries could be improved.

See all answers

What do you like most about Rapid7 AppSpider?

The most valuable feature of Rapid7 AppSpider is the vulnerability reporting data. Additionally, the data is reported in a convenient way rather than seeing them as a PDF. We are able to generate a...

See all answers

What is your experience regarding pricing and costs for Rapid7 AppSpider?

The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor. The price of the s...

See all answers

What needs improvement with Rapid7 AppSpider?

The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution.

See all answers

Comparisons

OWASP Zap vs Invicti

Compared 19% of the time

Acunetix vs Invicti

Compared 14% of the time

PortSwigger Burp Suite Professional vs Invicti

Compared 9% of the time

Qualys Web Application Scanning vs Invicti

Compared 7% of the time

Fortify WebInspect vs Invicti

Compared 6% of the time

More Invicti Competitors

Rapid7 InsightAppSec vs Rapid7 AppSpider

Compared 30% of the time

OWASP Zap vs Rapid7 AppSpider

Compared 14% of the time

Acunetix vs Rapid7 AppSpider

Compared 13% of the time

Qualys Web Application Scanning vs Rapid7 AppSpider

Compared 6% of the time

Tenable.io Web Application Scanning vs Rapid7 AppSpider

Compared 5% of the time

More Rapid7 AppSpider Competitors

Product Reports

Buyer's Guide

Invicti

June 2024

Download Invicti product report

Buyer's Guide

Rapid7 AppSpider

June 2024

Download Rapid7 AppSpider product report

Also Known As

Mavituna Netsparker

AppSpider

Learn More

Invicti

Rapid7

Overview

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

SPAs, APIs, mobile—the evolution of application technology is measured in months, not years. Is your web application security testing tool designed to keep up? AppSpider lets you collect all the information needed to test all the apps so that you aren’t left with gaping application risks.

Our dynamic application security testing (DAST) solution crawls to the deepest, darkest corners of even the most modern and complex apps to effectively test for risk and get you the insight you need to remediate faster. With AppSpider on your side (or, rather, all of your sides), you’ll be able to scan all the apps today and always be ready for whatever comes next.

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank

Microsoft

Buyer's Guide

Invicti vs. Rapid7 AppSpider

May 2024

Free Report: Invicti vs. Rapid7 AppSpider

Find out what your peers are saying about Invicti vs. Rapid7 AppSpider and other solutions. Updated: May 2024.

DOWNLOAD NOW

787,817 professionals have used our research since 2012.

See our Invicti vs. Rapid7 AppSpider report.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.