No more typing reviews! Try our Samantha, our new voice AI agent.

Akamai API Security vs Invicti comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Feb 4, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Akamai API Security
Ranking in API Security
3rd
Average Rating
7.8
Reviews Sentiment
6.5
Number of Reviews
11
Ranking in other categories
No ranking in other categories
Invicti
Ranking in API Security
10th
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
31
Ranking in other categories
Static Application Security Testing (SAST) (11th), Container Security (25th), Software Composition Analysis (SCA) (10th), Dynamic Application Security Testing (DAST) (4th), Application Security Posture Management (ASPM) (9th)
 

Mindshare comparison

As of August 2026, in the API Security category, the mindshare of Akamai API Security is 6.1%, down from 16.0% compared to the previous year. The mindshare of Invicti is 4.0%, up from 2.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
API Security Mindshare Distribution
ProductMindshare (%)
Akamai API Security6.1%
Invicti4.0%
Other89.9%
API Security
 

Featured Reviews

Alark Singh - PeerSpot reviewer
IT Specialist at Allianz
Advanced API defense has protected web channels and consistently reduced downtime and incident impact
Akamai API Security helps comply with DORA compliance in the Europe region, preventing any compliance issues. It helps demonstrate that the ISO understands the secured side is protected by Akamai API Security, ensuring that if any DOS attack is present, it will not occur or take the side down. Currently, no improvements are apparent. In the last few years, there was improvement as bot attacks have been addressed, with more focus now placed on bot attacks. At that time, there was a drawback, but Akamai API Security is improving day by day. Currently, no drawbacks are evident, and the product is good. Akamai API Security is delivering the best products every year.
Valavan Sivgalingam - PeerSpot reviewer
Senior Manager, Security Engineering at ESS
Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations
It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"API throttling is the most valuable feature of Akamai API Security."
"If I had to say something positive about the product that brings me the biggest benefit, I would say visibility."
"Akamai API Security has impacted my organization positively because when a user tries to access our servers from all over the world, the traffic first hits the DNS security or Akamai edge firewall before reaching our perimeter or infrastructure."
"Akamai's support is impeccable, and its plug-and-play features are helpful."
"The most valuable feature of this solution is its integration with API gateways, WAP and with part of their SDLC."
"The support from Akamai API Security is good, the employment and support are of excellent quality."
"Akamai API Security has made a positive difference for our organization by improving our security posture and saving our team time, as we can actually prioritize tasks unless there are some false positives, but it is definitely saving a lot of time."
"What I already appreciate about Akamai API Security is that initially we were struggling with how to get this configured, but after that everything went smoothly."
"The scanner is light on the network and does not impact the network when scans are running."
"High level of accuracy and quick scanning."
"It has a comprehensive resulting mechanism. It is a one-stop solution for all your security testing mechanisms."
"This tool is really fast and the information that they provide on vulnerabilities is pretty good."
"Invicti is a good product, and its API testing is also good."
"I am impressed by the whole technology that they are using in this solution. It is really fast. When using netscan, the confirmation that it gives on the vulnerabilities is pretty cool. It is really easy to configure a scan in Netsparker Web Application Security Scanner. It is also really easy to deploy."
"I would rate the stability as ten out of ten."
"Netsparker has done an awesome job with its crawler, as it has found all of the links (also thanks to its good DOM parser)."
 

Cons

"The main challenges we had with Akamai API Security were how to set it up on the AWS cloud environment and how to access this portal."
"It would be beneficial to use machine learning and API throttling together to identify how the APIs are called and whether it's coming from the right person or the wrong person."
"More features would be beneficial."
"The challenge I found was with contextualization and how analytics are generated."
"I see some areas for improvement in Akamai API Security because the adoption is not easy since it takes time to learn and configure."
"I believe Akamai API Security could be improved specifically in the integrations so that they can be executed more effectively with platforms such as a SIEM or SOAR, which would help me automate workflows for incident response."
"However, there is one drawback regarding technical support. Akamai API Security makes back-end changes because a SaaS solution is being used; sometimes they inform about changes, and sometimes they do not, which impacts clients as a P1 or P2 incident."
"However, this solution is quite costly as it comes with the content delivery network, providing both content delivery and security."
"Sometimes, it is slow; when we are running this application and browsing other applications concurrently, it makes other applications work slow."
"I find that the scannings are not sufficiently updated."
"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."
"The licensing model should be improved to be more cost-effective. There are URL restrictions that consume our license. Compared to other DAST solutions and task tools like WebInspect and Burp Enterprise, Invicti is very expensive. The solution’s scanning time is also very long compared to other DAST tools. It might be due to proof-based scanning."
"The scanning time, complexity, and authentication features of Invicti could be improved."
"They don't really provide the proof of concept up to the level that we need in our organization."
"I think that it freezes without any specific reason at times. This needs to be looked into."
"Improvement could be made in the area of production."
 

Pricing and Cost Advice

"We have a limit to the number of APIs we can use inside a bundle, and we have to pay extra if we exceed that limit."
"The price should be 20% lower"
"It is competitive in the security market."
"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."
"OWASP Zap is free and it has live updates, so that's a big plus."
"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."
"We never had any issues with the licensing; the price was within our assigned limits."
"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."
"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."
report
Use our free recommendation engine to learn which API Security solutions are best for your needs.
908,800 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
19%
Computer Software Company
9%
Manufacturing Company
8%
Comms Service Provider
6%
Financial Services Firm
14%
Manufacturing Company
9%
Construction Company
8%
Computer Software Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business5
Large Enterprise8
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise13
 

Questions from the Community

What needs improvement with Akamai API Security?
One thing that really surprised me was how effective the behavioral-based detection is in identifying the anomalies that traditional rule-based systems might miss. It gives much better visibility i...
What is your primary use case for Akamai API Security?
Akamai API Security's main use case in my environment is to protect critical APIs that are exposed to the internet, especially for banking and financial applications. I primarily use it to secure A...
What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?
The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...
What needs improvement with Invicti?
At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...
What is your primary use case for Invicti?
I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...
 

Also Known As

Noname Security
Netsparker
 

Overview

 

Sample Customers

Information Not Available
Samsung, The Walt Disney Company, T-Systems, ING Bank
Find out what your peers are saying about Akamai API Security vs. Invicti and other solutions. Updated: June 2026.
908,800 professionals have used our research since 2012.