Invicti vs OpenText Dynamic Application Security Testing vs Veracode comparison

The compared Invicti and OpenText solutions aren't in the same category. Invicti is ranked #5 in DAST , with an average rating of 8.7, and holds a 12.0% mindshare in the category. OpenText is ranked #2 in DAST , with an average rating of 8.0, and holds a 17.9% mindshare. Additionally, 96% of Invicti users are willing to recommend the solution, compared to 83% of OpenText users who would recommend it.

Invicti

Read 30 Invicti reviews

2,834 Views
510 Comparison Views

96% willing to recommend

OpenText Dynamic Applicatio...

Read 22 OpenText Dynamic Application Security Testing reviews

3,330 Views
866 Comparison Views

83% willing to recommend

Veracode

Read 204 Veracode reviews

19,783 Views
12,859 Comparison Views

90% willing to recommend

Invicti

OpenText Dynamic Applicatio...

Veracode

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Invicti, OpenText Dynamic Application Security Testing, and Veracode based on real PeerSpot user reviews.

Find out what your peers are saying about HCLSoftware , OpenText, Rapid7 and others in Dynamic Application Security Testing (DAST).

To learn more, read our detailed Dynamic Application Security Testing (DAST) Report (Updated: August 2025).

Buyer's Guide

Dynamic Application Security Testing (DAST)

August 2025

Download the complete report

Helped 867,349 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Mindshare comparison

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
Invicti	12.0%
OpenText Dynamic Application Security Testing	17.9%
HCL AppScan	14.3%
Other	55.8%

Dynamic Application Security Testing (DAST)

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
OpenText Dynamic Application Security Testing	17.9%
HCL AppScan	14.3%
Checkmarx One	13.5%
Other	54.3%

Dynamic Application Security Testing (DAST)

Application Security Tools Market Share Distribution
Product	Market Share (%)
Veracode	8.0%
SonarQube Server (formerly SonarQube)	20.8%
Checkmarx One	10.2%
Other	61.0%

Application Security Tools

Featured Reviews

Kunal M

Capability Center Leader, ETRM Platforms at Shell

Proactive scanning measures and realistic audit recommendations enhance development focus

Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment. This feature helps us focus on priorities and prioritize the development team's effort, integrating seamlessly with DevOps to facilitate proactive scans of environments. Invicti also provides audit recommendations that are quite realistic, making it easy to discuss plans with developers.

Read full review

Navin N

Global ISO 27001 Program Lead at DXC Technology

Effective scanning of diverse file extensions with fast reporting and issue resolution

We develop software packages for clients, and these clients are mostly in the BFSI sector. The packages need to be scanned, and we engage Fortify WebInspect for this. Customers typically perform their own application pen tests, but in some cases, we have engagements where customers want us to scan…

Read full review

Kv Rao

Site Leader (India) at Industrial Scientific

Integrates pipelines smoothly and fortifies code against vulnerabilities

I use Veracode in multiple places including static code analysis, penetration testing, and dynamic code analysis. It is part of our pipeline and integrates well with Bitbucket and Git pipelines The ease of integration with Bitbucket pipelines and Git pipelines is vital for us. Veracode allows us…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"When we try to manually exploit the vulnerabilities, it often takes time to realize what's going on and what needs to be done."

"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."

"Its ability to crawl a web application is quite different than another similar scanner."

"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."

"This tool is really fast and the information that they provide on vulnerabilities is pretty good."

"It has very good integration with the CI/CD pipeline."

"Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment."

"The solution generates reports automatically and quickly."

More Invicti pros

"Reporting, centralized dashboard, and bird's eye view of all vulnerabilities are the most valuable features."

"It's a well-known platform for doing dynamic application scanning."

"It is scalable and very easy to use."

"Technical support has been good."

"The feature that has been most influential in identifying vulnerabilities is its ability to crawl the website, understand the structure, and analyze the network packets sent and received."

"The user interface is ok and it is very simple to use."

"Good at scanning and finding vulnerabilities."

"Guided Scan option allows us to easily scan and share reports."

More OpenText Dynamic Application Security Testing pros

"The most valuable feature is the remediation consulting that they give. I feel like any vendor can identify the flaws but fixing the flaws is what is most important. Being able to have those consultation calls, schedule them in the platform, and have that discussion with an applications expert, that process scales well and that is what has allowed a lot more reduction of risk to happen."

"The benefits are quick discovery and understanding of software vulnerabilities that we are putting in our own code. By discovering them quickly enough, we can triage them and determine the best ways to remediate them and prevent them from happening in the future."

"Veracode is easy to use even if you're not a security professional. I like the dynamic analysis feature, which offers a lot of cost savings when used in production."

"The most important feature is the static scanning analysis, and the reason is that it can tell us vulnerability in that code, right before we go ahead and push something to production or provide something to a client... Dynamic scanning actually hits our Web applications, to try to detect any well known Web application vulnerabilities as well."

"The good thing about Veracode is that when one scans the respective application code, all the people who are part of the transformation project can update their reviews. If there are any security flaws or vulnerabilities identified, they are able to provide sufficient justification or details about the security flaws."

"Provides consistent evaluation and results without huge fluctuations in false positives or negatives."

"I like Veracode's static scanning and SCA. We use three static scans, software composition analysis, and dynamic scans. We haven't used dynamic scanning as much, but we're trying to integrate that into our environment more."

"For our rapid, secure DevOps cycle, we have integration of the Vericode API into our build tool, and Greenlight into our IDE."

More Veracode pros

Cons

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"Reporting should be improved. The reporting options should be made better for end-users. Currently, it is possible, but it's not the best. Being able to choose what I want to see in my reports rather than being given prefixed information would make my life easier. I had to depend on the API for getting the content that I wanted. If they could fix the reporting feature to make it more comprehensive and user-friendly, it would help a lot of end-users. Everything else was good about this product."

"The scanner itself should be improved because it is a little bit slow."

"Currently, there is nothing I would like to improve."

"The scannings are not sufficiently updated."

"They need to improve their support in the documentation. Their support mechanism is missing. Their responsiveness, technical staff, and these types of things need to be improved, and comprehensive documentation is required. They should have good self-service portal enhancement"

"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."

"The proxy review, the use report views, the current use tool and the subset requests need some improvement. It was hard to understand how to use them."

More Invicti cons

"One thing I would like to see them introduce is a cloud-based platform."

"It took us between eight and ten hours to scan an entire site, which is somewhat slow and something that I think can be improved."

"We have often encountered scanning errors."

"It requires improvement in terms of scanning. The application scan heavily utilizes the resources of an on-premise server. 32 GB RAM is very high for an enterprise web application."

"The initial setup was complex."

"A localized version, for example, in Korean would be a big improvement to this solution."

"I would like WebInspect's scanning capability to be quicker."

"The scanner could be better."

More OpenText Dynamic Application Security Testing cons

"Reporting. Some of the reporting features of Veracode do need improvement. They do not have the most robust access to data. That would be a bit more beneficial to a lot of our clients as well as our actual in-house staff. I've been talking to our program management at Veracode about that, and that is actually on their radar to have that improved, I think actually this year."

"When we implement a policy, it can be very difficult to locate."

"I've seen slightly better static analysis tools from other companies when it comes to speed and ease of use."

"Software developers are always thinking about the next big thing but lose sight of what's happening right now. If you have an idea for a feature request, you must submit it to be voted on by the Veracode community. I don't like this. No one will look at it unless enough people vote for it."

"Veracode should make it easier to navigate between the solutions that they offer, i.e. between dynamic, static, and the source code analysis."

"We have encountered occasional issues with scalability."

"From what we have seen of Veracode's SCA offering, it is just average."

"Veracode's container scanning could be improved. We containerize all the platforms we use inside a Docker image. For example, we create a Microsoft Docker image that we build our application on top of. I would like Veracode to implement IT scans before we commit the code."

More Veracode cons

Pricing and Cost Advice

"We never had any issues with the licensing; the price was within our assigned limits."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"The price should be 20% lower"

"OWASP Zap is free and it has live updates, so that's a big plus."

"It is competitive in the security market."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

More Invicti pricing and cost advice

"This solution is very expensive."

"Its price is almost similar to the price of AppScan. Both of them are very costly. Its price could be reduced because it can be very costly for unlimited IT scans, etc. I'm not sure, but it can go up to $40,000 to $50,000 or more than that."

"Fortify WebInspect is a very expensive product."

"Our licensing is such that you can only run one scan at a time, which is inconvenient."

"The price is okay."

"It’s a fair price for the solution."

"The pricing is not clear and while it is not high, it is difficult to understand."

"For our company, the price is reasonable for the benefits that we get."

"I think licensing needs to be changed or updated so that it works with adjustments. Pricing is expensive compared to the amount of scanning we perform."

"It is an expensive solution, but it's the best solution available on the market. If you want something at the top, you have to pay a bit more than the average."

"We are still considering it at the enterprise level. It has a subscription-based model. We find its price a little high based on the features it provides."

"The pricing for Veracode is high, making it difficult for beginners to afford."

"Costs are reasonable. No special infrastructure is required and the license model is good."

"It can be expensive to do this, so I would just make sure that you're getting the proper number of licenses. Do your analysis. Make sure you know exactly what it is you need, going in."

"Pricing/licensing is complicated."

More Veracode pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

867,349 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

15%

Manufacturing Company

Government

Financial Services Firm

15%

Government

15%

Manufacturing Company

13%

Computer Software Company

10%

Financial Services Firm

16%

Computer Software Company

16%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	13
Midsize Enterprise	4
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	1
Large Enterprise	15

By reviewers
Company Size	Count
Small Business	69
Midsize Enterprise	43
Large Enterprise	112

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

As a technical user, I do not handle pricing or licensing, but I am aware that Invicti offers flexible licensing mode...

See all answers

What do you like most about Invicti?

The most valuable feature of Invicti is getting baseline scanning and incremental scan.

See all answers

What needs improvement with Invicti?

The main concern is on the performance side, but other than that, we find it really helpful in identifying web vulner...

See all answers

What is your experience regarding pricing and costs for Fortify WebInspect?

While I am not directly involved with licensing, I can share that our project's license for 1-9 applications costs be...

See all answers

What needs improvement with Fortify WebInspect?

WebInspect works efficiently with Java-based or .NET based applications. However, it struggles with Salesforce applic...

See all answers

What is your primary use case for Fortify WebInspect?

I am currently working with several tools. For Fortify, I use SCA and WebInspect. Apart from that, I use Burp Suite f...

See all answers

Which gives you more for your money - SonarQube or Veracode?

SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. Son...

See all answers

What do you like most about Veracode?

The SAST and DAST modules are great.

See all answers

What is your experience regarding pricing and costs for Veracode?

The product’s price is a bit higher compared to other solutions. However, the tool provides good vulnerability and da...

See all answers

Comparisons

Acunetix vs Invicti

Compared 19% of the time

OWASP Zap vs Invicti

Compared 10% of the time

SonarQube Server (formerly SonarQube) vs Invicti

Compared 7% of the time

Snyk vs Invicti

Compared 5% of the time

Rapid7 InsightAppSec vs Invicti

Compared 5% of the time

More Invicti Competitors

PortSwigger Burp Suite Professional vs OpenText Dynamic Application Security Testing

Compared 17% of the time

OWASP Zap vs OpenText Dynamic Application Security Testing

Compared 11% of the time

Qualys Web Application Scanning vs OpenText Dynamic Application Security Testing

Compared 8% of the time

PortSwigger Burp Suite Enterprise Edition vs OpenText Dynamic Application Security Testing

Compared 8% of the time

Contrast Security Assess vs OpenText Dynamic Application Security Testing

Compared 4% of the time

More OpenText Dynamic Application Security Testing Competitors

SonarQube Server (formerly SonarQube) vs Veracode

Compared 16% of the time

Checkmarx One vs Veracode

Compared 9% of the time

GitHub Advanced Security vs Veracode

Compared 7% of the time

OpenText Core Application Security vs Veracode

Compared 4% of the time

OWASP Zap vs Veracode

Compared 4% of the time

More Veracode Competitors

Product Reports

Buyer's Guide

Invicti

September 2025

Download Invicti product report

Buyer's Guide

OpenText Dynamic Application Security Testing

August 2025

OpenText Dynamic Application Security Testing report

Download OpenText Dynamic Application Security Testing product report

Buyer's Guide

Veracode

August 2025

Download Veracode product report

Also Known As

Netsparker

Micro Focus WebInspect, WebInspect

Crashtest Security , Veracode Detect

Overview

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Invicti

OpenText Dynamic Application Security Testing offers robust scalability, ease of use, and high accuracy in scanning, making it a valuable tool for enterprises.

This security testing platform is known for its centralized dashboard, guided scans, and comprehensive reporting. It integrates seamlessly with tools like Fortify code scanner and supports extensive vulnerability detection and analysis, enhancing efficiency in security management. Despite its strengths, users suggest improvements in cloud integration, cost-effectiveness, and installation processes. Faster scans, reduced false positives, and improved mobile testing features are also desired.

What are the key features of OpenText Dynamic Application Security Testing?

Scalability: Easily adapts to changing enterprise needs.
Ease of Use: User-friendly interface with guided scans.
Comprehensive Reporting: Detailed vulnerability analysis and reporting.
Integration Capabilities: Works with Fortify code scanner and user authentication scanning.
Wide Vulnerability Detection: Identifies extensive security vulnerabilities.

What benefits should users expect from reviews?

Efficient Vulnerability Management: Streamlines security management in development environments.
Detailed Analysis: Provides in-depth insights into security issues.
Quick Setup: Easy to deploy within existing systems.
Enterprise Preference: Supports enterprise environments efficiently.

In industries like BFSI, OpenText Dynamic Application Security Testing is employed for performance network application testing, dynamic and static application security testing, and code checks. Security and QA teams use it in development processes to ensure application security prior to release, proving integral in both enterprise and testing environments.

OpenText

Veracode is a leading provider of application security solutions, offering tools to identify, mitigate, and prevent vulnerabilities across the software development lifecycle. Its cloud-based platform integrates security into DevOps workflows, helping organizations ensure that their code remains secure and compliant with industry standards.

Veracode supports multiple application security testing types, including static analysis (SAST), dynamic analysis (DAST), software composition analysis (SCA), and manual penetration testing. These tools are designed to help developers detect vulnerabilities early in development while maintaining speed in deployment. Veracode also emphasizes scalability, offering features for enterprises that manage a large number of applications across different teams. Its robust reporting and analytics capabilities allow organizations to continuously monitor their security posture and track progress toward remediation.

What are the key features of Veracode?

Static Analysis (SAST) - Scans source code for vulnerabilities before deployment.
Dynamic Analysis (DAST) - Examines applications in a running state to detect flaws in real-time.
Software Composition Analysis (SCA) - Identifies risks in open-source libraries and third-party components.
Manual Penetration Testing - Offers expert analysis for more complex vulnerabilities.
Integrations with DevOps tools - Seamlessly integrates with CI/CD pipelines for automated security checks.

What benefits should users consider in Veracode reviews?

Early detection of vulnerabilities - Helps developers fix security issues early in the development process.
Scalability - Supports organizations with large-scale application portfolios.
Compliance support - Ensures applications meet various security standards and regulations.
Developer training - Provides tools for educating developers on secure coding practices.
Comprehensive reporting - Offers detailed reports that track remediation and risk trends.

Veracode is widely adopted in industries like finance, healthcare, and government, where compliance and security are critical. It helps these organizations maintain strict security standards while enabling rapid development through its integration with Agile and DevOps methodologies.

Veracode helps businesses secure their applications efficiently, ensuring they can deliver safe and compliant software at scale.

Veracode

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank

Aaron's

Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.

Buyer's Guide

Dynamic Application Security Testing (DAST)

August 2025

Download Free Report

Find out what your peers are saying about HCLSoftware , OpenText, Rapid7 and others in Dynamic Application Security Testing (DAST). Updated: August 2025.

DOWNLOAD NOW

867,349 professionals have used our research since 2012.