Invicti vs PortSwigger Burp Suite Enterprise Edition comparison

"Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment."

"The most attractive feature was the reporting review tool. The reporting review was very impressive and produced very fruitful reports."

"The scanner and the result generator are valuable features for us."

"Invicti's best feature is the ability to identify vulnerabilities and manually verify them."

"When we try to manually exploit the vulnerabilities, it often takes time to realize what's going on and what needs to be done."

"Netsparker provides a more interactive interface that is more appealing."

"The platform is stable."

"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."

"The product's initial setup phase was super easy."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The initial setup is straightforward."

"The product is easy to use."

"The most valuable part of it was probably the ability to intercept and modify calls."

"We are in the early stage of using the solution making it difficult to fully determine the best features. However, we have noticed the CMDB and device discovery features look valuable at this time."

"The solution's extensions really expand the capabilities and features offered by the installation."

"Its automated scanning feature saves time."

"The license could be better. It would help if they could allow us to scan multiple URLs on the same license. It's a major hindrance that we are facing while scanning applications, and we have to be sure that the URLs are the same and not different so that we do not end up consuming another license for it. Netsparker is one of the costliest products in the market. The licensing is tied to the URL, and it's restricted. If you have a URL that you scanned once, like a website, you cannot retry that same license. If you are scanning the same website but in a different domain or different URL, you might end up paying for a second license. It would also be better if they provided proper support for multi-factor authentications. In the next release, I would like them to include good multi-factor authentication support."

"I think that it freezes without any specific reason at times. This needs to be looked into."

"The support's response time could be faster since we are in different time zones."

"They need to improve their support in the documentation. Their support mechanism is missing. Their responsiveness, technical staff, and these types of things need to be improved, and comprehensive documentation is required. They should have good self-service portal enhancement"

"The proxy review, the use report views, the current use tool and the subset requests need some improvement. It was hard to understand how to use them."

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"Right now, they are missing the static application security part, especially web application security."

"They could enhance the support for data swap testing for the platform."

"It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."

"There are features or functionality missing, but PortSwigger Burp Suite Enterprise Edition does try to update frequently to alleviate the shortcomings."

"Scalability could be better."

"The product needs to have the ability to evaluate more."

"The solution is a bit expensive."

"PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers."

"The stability of the scans could be improved."

"The implementation of the solution is quite complicated and could be easier."

"The price should be 20% lower"

"We never had any issues with the licensing; the price was within our assigned limits."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"It is competitive in the security market."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"For Professional, it's about $400 per year."