Invicti vs Tenable.io Web Application Scanning comparison

The compared Invicti and Tenable solutions aren't in the same category. Invicti is ranked #4 in DAST , with an average rating of 8.5, and holds a 8.3% mindshare in the category. Tenable is ranked #20 in AS , with an average rating of 8.5, and holds a 1.4% mindshare. Additionally, 96% of Invicti users are willing to recommend the solution, compared to 94% of Tenable users who would recommend it.

Invicti

Read 31 Invicti reviews

3,717 Views
855 Comparison Views

96% willing to recommend

Tenable.io Web Application ...

Read 18 Tenable.io Web Application Scanning reviews

2,265 Views
1,835 Comparison Views

94% willing to recommend

Invicti

Tenable.io Web Application ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Invicti and Tenable.io Web Application Scanning compete in web application security. Tenable.io appears to have the upper hand due to its comprehensive feature set and market value, while Invicti stands out for pricing and support.

Features: Invicti is known for intuitive vulnerability detection, effective integration capabilities, and user-friendly interface. Tenable.io is recognized for extensive scanning coverage, detailed reporting, and a rich set of features conducive to diverse security assessments.

Room for Improvement: Invicti could enhance scalability, improve dashboard customization, and broaden scan depth. Tenable.io users point out the need for faster scan speeds, reduction in false positives, and simplified user interface.

Ease of Deployment and Customer Service: Invicti provides a straightforward deployment process with responsive customer support. Tenable.io, though robust, poses challenges with configuration complexity but benefits from highly-rated support.

Pricing and ROI: Invicti offers a favorable pricing model that aligns with swift ROI. Tenable.io, while a significant investment, is perceived as justified by the long-term benefits of its extensive feature set.

To learn more, read our detailed Invicti vs. Tenable.io Web Application Scanning Report (Updated: October 2024).

Buyer's Guide

Invicti vs. Tenable.io Web Application Scanning

October 2024

Download the complete report

Helped 884,933 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Invicti

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (11th), Container Security (25th), Software Composition Analysis (SCA) (8th), API Security (8th), Dynamic Application Security Testing (DAST) (4th), Application Security Posture Management (ASPM) (5th)

Tenable.io Web Application ...

Average Rating

7.8

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

Application Security Tools (20th)

Mindshare comparison

Invicti and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Invicti is designed for Dynamic Application Security Testing (DAST) and holds a mindshare of 8.3%, up 5.7% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.

Dynamic Application Security Testing (DAST) Mindshare Distribution
Product	Mindshare (%)
Invicti	8.3%
Veracode	17.2%
Checkmarx One	16.4%
Other	58.1%

Dynamic Application Security Testing (DAST)

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Tenable.io Web Application Scanning	1.4%
SonarQube	16.3%
Checkmarx One	9.9%
Other	72.4%

Application Security Tools

Featured Reviews

Valavan Sivgalingam

Senior Manager, Security Engineering at ESS

Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations

It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.

Read full review

Hatem Langar

Security Analyst at TOPNET

Web audits have identified vulnerabilities and now provide clear visibility into compliance gaps

We have experience with Tenable.io Web Application Scanning, and we use it as well; we have approximately ten licenses for web application scanning. We use it to find vulnerabilities, but Tenable.io Web Application Scanning does not include remediation; we remediate with other products. We use the…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its ability to crawl a web application is quite different than another similar scanner."

"NetSparker is a very easy to use and understand product."

"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."

"Technical support is very professional, 10/10."

"I am impressed by the whole technology that they are using in this solution. It is really fast. When using netscan, the confirmation that it gives on the vulnerabilities is pretty cool. It is really easy to configure a scan in Netsparker Web Application Security Scanner. It is also really easy to deploy."

"OWASP Zap is free and it has live updates, so that's a big plus."

"Scan, proxify the application, and then detailed report along with evidence and remediations to problems."

"The most valuable feature of Invicti is getting baseline scanning and incremental scan."

More Invicti pros

"The most valuable feature is the reporting, which provides a good level of detail with respect to vulnerabilities."

"The solution is stable."

"The initial setup is straightforward."

"I would recommend Tenable.io Web Application Scanning to others."

"It has good unified web application scanning and exposure management."

"The solution's instant reports feature is the most effective for detecting threats."

"It is fully automated."

"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."

More Tenable.io Web Application Scanning pros

Cons

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"I think that it freezes without any specific reason at times."

"The higher level vulnerabilities like Cross-Site Scripting, SQL Injection, and other higher level injection attacks are difficult to highlight using Netsparker."

"Maybe the ability to make a good reporting format is needed."

"When scanning a large web-based application, it tends to process slow and takes a long time especially on crawling and attacking part."

"The scanner itself should be improved because it is a little bit slow."

"The license could be better. It would help if they could allow us to scan multiple URLs on the same license. It's a major hindrance that we are facing while scanning applications, and we have to be sure that the URLs are the same and not different so that we do not end up consuming another license for it. Netsparker is one of the costliest products in the market. The licensing is tied to the URL, and it's restricted. If you have a URL that you scanned once, like a website, you cannot retry that same license. If you are scanning the same website but in a different domain or different URL, you might end up paying for a second license. It would also be better if they provided proper support for multi-factor authentications. In the next release, I would like them to include good multi-factor authentication support."

More Invicti cons

"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."

"Tenable.io Web Application Scanning could improve by offering faster fuzzing."

"The reporting has a very limited customization capability."

"The solution's dashboards could be improved and made more user-friendly."

"The report customization needs to be better."

"We have encountered some problems with the technical support from Tenable; I would rate it a five out of ten. It is not efficacious, especially the first-level support."

"It would be great if there were a dashboard that is more user-friendly."

"The dashboard could be more user-friendly."

More Tenable.io Web Application Scanning cons

Pricing and Cost Advice

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"We never had any issues with the licensing; the price was within our assigned limits."

"The price should be 20% lower"

"It is competitive in the security market."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"OWASP Zap is free and it has live updates, so that's a big plus."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

More Invicti pricing and cost advice

"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."

"I rate the product's pricing a four out of ten."

"It follows the same licensing scheme as Tenable.io and Tenable. sc."

"Tenable.io Web Application Scanning is expensive for small businesses."

"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."

"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."

"The pricing is okay."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

884,933 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

15%

Manufacturing Company

Computer Software Company

Government

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

10%

Government

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	5
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...

See all answers

What needs improvement with Invicti?

At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...

See all answers

What is your primary use case for Invicti?

I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...

See all answers

What needs improvement with Tenable.io Web Application Scanning?

If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.

See all answers

What advice do you have for others considering Tenable.io Web Application Scanning?

I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...

See all answers

What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?

I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.

See all answers

Comparisons

Acunetix vs Invicti

Compared 9% of the time

Veracode vs Invicti

Compared 8% of the time

SonarQube vs Invicti

Compared 6% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 5% of the time

More Invicti Competitors

Acunetix vs Tenable.io Web Application Scanning

Compared 9% of the time

Qualys Web Application Scanning vs Tenable.io Web Application Scanning

Compared 7% of the time

PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning

Compared 6% of the time

CrowdStrike Falcon Cloud Security vs Tenable.io Web Application Scanning

Compared 6% of the time

HCL AppScan vs Tenable.io Web Application Scanning

Compared 5% of the time

More Tenable.io Web Application Scanning Competitors

Product Reports

Buyer's Guide

Invicti

March 2026

Download Invicti product report

Buyer's Guide

Application Security Tools

February 2026

Tenable.io Web Application Scanning report

Download Tenable.io Web Application Scanning product report

Also Known As

Netsparker

No data available

Overview

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Invicti

Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.

Tenable

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank

IMDEX

Buyer's Guide

Invicti vs. Tenable.io Web Application Scanning

October 2024

Free Report: Invicti vs. Tenable.io Web Application Scanning

Find out what your peers are saying about Invicti vs. Tenable.io Web Application Scanning and other solutions. Updated: October 2024.

DOWNLOAD NOW

884,933 professionals have used our research since 2012.

See our Invicti vs. Tenable.io Web Application Scanning report.

We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.