Invicti vs Qwiet AI comparison

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"Invicti is a good product, and its API testing is also good."

"This tool is really fast and the information that they provide on vulnerabilities is pretty good."

"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."

"Netsparker has valuable features, including the ability to scan our website, an interactive approach, and security data integration."

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"It correctly parses DOM and JS and has really good support for URL Rewrite rules, which is important for today's websites."

"It has very good integration with the CI/CD pipeline."

"When it comes to ShiftLeft, the most valuable feature is definitely its ease of use and cost-effectiveness."

"Netsparker doesn't provide the source code of the static application security testing."

"Right now, they are missing the static application security part, especially web application security."

"Maybe the ability to make a good reporting format is needed."

"They could enhance the support for data swap testing for the platform."

"The scanner itself should be improved because it is a little bit slow."

"The licensing model should be improved to be more cost-effective. There are URL restrictions that consume our license. Compared to other DAST solutions and task tools like WebInspect and Burp Enterprise, Invicti is very expensive. The solution’s scanning time is also very long compared to other DAST tools. It might be due to proof-based scanning."

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"The scannings are not sufficiently updated."

"Having support from senior management is crucial in making it mandatory for teams to collaborate with the security team throughout the development process."

"It is competitive in the security market."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"OWASP Zap is free and it has live updates, so that's a big plus."

"We never had any issues with the licensing; the price was within our assigned limits."

"The price should be 20% lower"

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."