CucumberStudio vs Invicti comparison

Read 30 Invicti reviews

2,834 Views
510 Comparison Views

96% willing to recommend

CucumberStudio

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CucumberStudio and Invicti based on real PeerSpot user reviews.

Find out in this report how the two Dynamic Application Security Testing (DAST) solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI.

To learn more, read our detailed CucumberStudio vs. Invicti Report (Updated: July 2025).

CucumberStudio vs. Invicti

July 2025

Download the complete report

Helped 867,676 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CucumberStudio

Ranking in Dynamic Application Security Testing (DAST)

8th

Average Rating

8.0

Reviews Sentiment

7.1

Number of Reviews

Ranking in other categories

Rapid Application Development Software (25th)

Invicti

Ranking in Dynamic Application Security Testing (DAST)

5th

Average Rating

8.2

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (14th), API Security (9th)

Mindshare comparison

As of September 2025, in the Dynamic Application Security Testing (DAST) category, the mindshare of CucumberStudio is 0.5%, up from 0.3% compared to the previous year. The mindshare of Invicti is 12.0%, up from 11.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
Invicti	12.0%
CucumberStudio	0.5%
Other	87.5%

Dynamic Application Security Testing (DAST)

Featured Reviews

Walter Wirch

Technical Expert at Bertelsmann SE & Co.

Facilitates integration of test scenarios while needing modernization of components

CucumberStudio is primarily used for designing test scenarios and automating testing. We have implemented it in conjunction with our own routines for integration into our infrastructure CucumberStudio aligns with our strategy for data-driven testing. It supports our product owners in designing…

Read full review

Kunal M

Capability Center Leader, ETRM Platforms at Shell

Proactive scanning measures and realistic audit recommendations enhance development focus

Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment. This feature helps us focus on priorities and prioritize the development team's effort, integrating seamlessly with DevOps to facilitate proactive scans of environments. Invicti also provides audit recommendations that are quite realistic, making it easy to discuss plans with developers.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The solution is stable."

"CucumberStudio aligns with our strategy for data-driven testing."

"The data table that helps in converting a single script to multiple test cases is very helpful."

"The URL is very useful, and it has a very good UI for deploying information of the scenarios created."

"The best thing is that a person without knowledge about the program can easily understand what happened in our testing process."

"CucumberStudio has a very user-friendly interface."

"CucumberStudio aligns with our strategy for data-driven testing."

"The most valuable feature of CucumberStudio is its use of action words, which allows me to avoid writing test cases from scratch for the most common scenarios."

"The platform is stable."

"Invicti is a good product, and its API testing is also good."

"Attacking feature: Actually, attacking is not a solo feature. It contains many attack engines, Hawk, and many properties. But Netsparker's attacking mechanism is very flexible. This increases the vulnerability detection rate. Also, Netsparker made the Hawk for real-time interactive command-line-based exploit testing. It's very valuable for a vulnerability scanner."

"It has very good integration with the CI/CD pipeline."

"The best features of Invicti are its ability to confirm access vulnerabilities, SSL injection vulnerabilities, and its connectors to other security tools."

"I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities."

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"The scanner is light on the network and does not impact the network when scans are running."

More Invicti pros

Cons

"A key area for improvement is to revamp outdated components such as HipTest publisher."

"I would like to see better customer support."

"The reporting needs to be improved."

"Another kind of deployment might be useful, perhaps an option to install the tool in a local deployment."

"A key area for improvement is to revamp outdated components such as HipTest publisher."

"I think it would be better if we could also do the reporting with CucumberStudio."

"CucumberStudio's API integration could be improved both in terms of reliability and design."

"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."

"Reporting should be improved. The reporting options should be made better for end-users. Currently, it is possible, but it's not the best. Being able to choose what I want to see in my reports rather than being given prefixed information would make my life easier. I had to depend on the API for getting the content that I wanted. If they could fix the reporting feature to make it more comprehensive and user-friendly, it would help a lot of end-users. Everything else was good about this product."

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"The solution's false positive analysis and vulnerability analysis libraries could be improved."

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"The support's response time could be faster since we are in different time zones."

"Netsparker doesn't provide the source code of the static application security testing."

"The licensing model should be improved to be more cost-effective. There are URL restrictions that consume our license. Compared to other DAST solutions and task tools like WebInspect and Burp Enterprise, Invicti is very expensive. The solution’s scanning time is also very long compared to other DAST tools. It might be due to proof-based scanning."

More Invicti cons

Pricing and Cost Advice

Information not available

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"It is competitive in the security market."

"We never had any issues with the licensing; the price was within our assigned limits."

"The price should be 20% lower"

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"OWASP Zap is free and it has live updates, so that's a big plus."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

More Invicti pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

867,676 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

No data available

Financial Services Firm

16%

Computer Software Company

15%

Manufacturing Company

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	3
Midsize Enterprise	3
Large Enterprise	4

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	4
Large Enterprise	13

Questions from the Community

What needs improvement with Hiptest?

CucumberStudio's API integration could be improved both in terms of reliability and design. The API requires data to be sent in a specific format, which takes time to build. Additionally, the repor...

What is your primary use case for Hiptest?

I use CucumberStudio as a test case repository. All of our test cases are stored there. It is also part of our test planning process. For every sprint, we plan the test cases in CucumberStudio and ...

What advice do you have for others considering Hiptest?

For teams following a BDD style software development approach, CucumberStudio is a great collaborative tool that covers all the basic requirements of a test management tool. I would rate CucumberSt...

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

As a technical user, I do not handle pricing or licensing, but I am aware that Invicti offers flexible licensing models based on organizational needs.

What do you like most about Invicti?

The most valuable feature of Invicti is getting baseline scanning and incremental scan.

What needs improvement with Invicti?

The main concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, ...

TestRail vs CucumberStudio

Comparisons

Compared 61% of the time

GitHub CoPilot vs CucumberStudio

Compared 39% of the time

More CucumberStudio Competitors

Acunetix vs Invicti

Compared 19% of the time

OWASP Zap vs Invicti

Compared 10% of the time

Veracode vs Invicti

Compared 7% of the time

SonarQube Server (formerly SonarQube) vs Invicti

Compared 7% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 6% of the time

More Invicti Competitors

Product Reports

Rapid Application Development Software

August 2025

Download CucumberStudio product report

Download Invicti product report

September 2025

Also Known As

Hiptest

Netsparker

Overview

Formerly HipTest: CucumberStudio is the leading collaboration platform for BDD - an easy-to-use tool to define ideas, test code, and learn in production from real-time insight.

SmartBear

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Sample Customers

Cisco, Cardinal Health, Intuit, Smartbox, Accenture, Deliveroo

Samsung, The Walt Disney Company, T-Systems, ING Bank