Try our new research platform with insights from 80,000+ expert users

Invicti vs Parasoft SOAtest comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Invicti
Ranking in Static Application Security Testing (SAST)
11th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
31
Ranking in other categories
Container Security (25th), Software Composition Analysis (SCA) (8th), API Security (9th), Dynamic Application Security Testing (DAST) (5th), Application Security Posture Management (ASPM) (5th)
Parasoft SOAtest
Ranking in Static Application Security Testing (SAST)
20th
Average Rating
8.2
Reviews Sentiment
6.9
Number of Reviews
33
Ranking in other categories
Functional Testing Tools (16th), API Testing Tools (10th), Test Automation Tools (15th)
 

Mindshare comparison

As of January 2026, in the Static Application Security Testing (SAST) category, the mindshare of Invicti is 1.5%, up from 1.5% compared to the previous year. The mindshare of Parasoft SOAtest is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Invicti1.5%
Parasoft SOAtest0.7%
Other97.8%
Static Application Security Testing (SAST)
 

Featured Reviews

Valavan Sivgalingam - PeerSpot reviewer
Senior Manager, Security Engineering at ESS
Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations
It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.
reviewer2772063 - PeerSpot reviewer
Quality Specialist 2A at a financial services firm with 10,001+ employees
Has reduced manual testing effort with customization options but occasionally crashes during complex executions
One improvement would be to integrate it with modern technologies such as AI, so we can generate test cases by providing the details so that it can generate the structure, and later the person working can modify and enhance it. We can add more customized tools, and reporting can be enhanced. Currently, the reporting part is at a step level, and it does not give details for a particular test case, so improvements in those areas would be beneficial. There are performance issues where the tool crashes sometimes. In particular use cases with numerous steps, it experiences crashes. I have encountered stability and performance issues with it.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."
"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."
"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."
"Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment."
"One of the features I like about this program is the low number of false positives and the support it offers."
"Netsparker provides a more interactive interface that is more appealing."
"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."
"Its ability to crawl a web application is quite different than another similar scanner."
"Generating new messages, based on the existing .EDN and .XML messages, is a crucial part or the testing project that I’m currently in."
"We do a lot of web services testing and REST services testing. That is the focus of this product."
"Good write and read files which save execution inputs and outputs and can be stored locally."
"Automatic testing is the most valuable feature."
"Parasoft SOAtest improves the quality of the application, increases security and security compliance, and it is a cost-effective tool."
"If you want something that’s not provided out of the box, then you can write it yourself and integrate it with SOAtest."
"Parasoft SOAtest has improved the quality of our automated web services, which can be easily implemented through service chaining and service virtualization."
"The solution is scalable."
 

Cons

"Right now, they are missing the static application security part, especially web application security."
"The support's response time could be faster since we are in different time zones."
"Invicti's reporting capabilities need enhancement. We need enterprise-level information instead of repo-level details. Unlike Appiro, Invicti does not provide portfolio-level insights into vulnerability remediation over time."
"The scanning time, complexity, and authentication features of Invicti could be improved."
"Netsparker doesn't provide the source code of the static application security testing."
"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."
"The solution needs to make a more specific report."
"I think that it freezes without any specific reason at times. This needs to be looked into."
"Reporting facilities can be better."
"One area that could use improvement is the cryptography capabilities in Parasoft SOAtest. It did not support enough of the protocols or cryptography formats we needed, which led us to create our own solutions."
"In terms of improvements for Parasoft SOAtest, some features could be added or perhaps existing areas could be improved, such as lowering prices."
"Reports could be customized and more descriptive according to the user's or company's requirements."
"The feedback that we received from the DevOps of our organization was that the tool was a little heavy from the transformation perspective."
"During the process of working with SOAtest and building test cases, the .TST files will grow. A negative side effect is that saving your changes takes more time."
"Parasoft SOAtest has an internal refresh function where you can refresh the software to show the changes you’ve made in your projects. Unfortunately this function does not work properly, because it often does not show the changes after you’ve hit te refresh button a few times."
"Tuning the tool takes time because it gives quite a long list of warnings."
 

Pricing and Cost Advice

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."
"OWASP Zap is free and it has live updates, so that's a big plus."
"It is competitive in the security market."
"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."
"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."
"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."
"The price should be 20% lower"
"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."
"I think it would be a great step to decrease the price of the licenses."
"The license price is a little expensive, but it provides a better outcome in terms of the end-to-end automation process."
"It is an expensive product, so think carefully about whether it fits your purposes and is the right tool for you."
"From what I understand, Parasoft SOAtest isn't the cheapest option. But it has a lot to offer."
"The price is around $5,000 USD."
"They do have a confusing licensing structure."
"The cost of Parasoft seems to have gotten higher with a projection that wasn't really stipulated for our company. They've done a tremendous job at negotiating those deals."
"We are completed satisfied with Parasoft SOAtest. The ROI is more than 95%."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
17%
Computer Software Company
11%
Manufacturing Company
9%
Government
8%
Financial Services Firm
20%
Manufacturing Company
15%
Computer Software Company
10%
University
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise13
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise3
Large Enterprise23
 

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?
The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...
What needs improvement with Invicti?
At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...
What is your primary use case for Invicti?
I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...
What is your experience regarding pricing and costs for Parasoft SOAtest?
I am not involved in the pricing aspect, setup cost, or licensing cost of Parasoft SOAtest. Our dedicated tools and support teams handle those aspects.
What needs improvement with Parasoft SOAtest?
One improvement would be to integrate it with modern technologies such as AI, so we can generate test cases by providing the details so that it can generate the structure, and later the person work...
What is your primary use case for Parasoft SOAtest?
We use Parasoft SOAtest for API testing and service virtualization with responder setup. Service virtualization is very helpful in our testing. When any downstream system is not available or we are...
 

Also Known As

Netsparker
SOAtest
 

Overview

 

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank
Charter Communications, Sabre, Caesars Entertainment, Charles Schwab, ING, Intel, Northbridge Financial, Capital Services, WoodmenLife
Find out what your peers are saying about Invicti vs. Parasoft SOAtest and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.