Invicti vs PortSwigger Burp Suite Enterprise Edition comparison

"Crawling feature: Netsparker has very detail crawling steps and mechanisms. This feature expands the attack surface."

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"NetSparker is a very easy to use and understand product."

"I would tell potential users that it's really one of the best products in the market for web application security or Dynamic Application Security Testing (DAST)."

"This tool is really fast and the information that they provide on vulnerabilities is pretty good."

"It has very good integration with the CI/CD pipeline."

"Invicti is a good product, and its API testing is also good."

"Invicti's best feature is the ability to identify vulnerabilities and manually verify them."

"I like normal dynamic scanning, general web applications scanning, and vulnerability assessments."

"The initial setup is straightforward."

"The most valuable features of PortSwigger Burp Suite Enterprise Edition are the vast amount of options and ease of use. They frequently improve the solution every six months to a year. Additionally, if we want any more features we can upload a custom script to meet our needs."

"We are in the early stage of using the solution making it difficult to fully determine the best features; however, we have noticed the CMDB and device discovery features look valuable at this time."

"The tool is loaded with many features that give us ROI."

"This tool helps identify vulnerabilities. We then provide the report to the developers, who address the issues identified automatically. Its most valuable feature is CI/CD integration."

"The most valuable part of it was probably the ability to intercept and modify calls."

"The product's initial setup phase was super easy."

"Right now, they are missing the static application security part, especially web application security."

"Sometimes, it is slow; when we are running this application and browsing other applications concurrently, it makes other applications work slow."

"The license could be better. It would help if they could allow us to scan multiple URLs on the same license. It's a major hindrance that we are facing while scanning applications, and we have to be sure that the URLs are the same and not different so that we do not end up consuming another license for it. Netsparker is one of the costliest products in the market. The licensing is tied to the URL, and it's restricted. If you have a URL that you scanned once, like a website, you cannot retry that same license. If you are scanning the same website but in a different domain or different URL, you might end up paying for a second license. It would also be better if they provided proper support for multi-factor authentications. In the next release, I would like them to include good multi-factor authentication support."

"Maybe the ability to make a good reporting format is needed."

"The scanning time, complexity, and authentication features of Invicti could be improved."

"I find that the scannings are not sufficiently updated."

"The support's response time could be faster since we are in different time zones."

"Maybe supported clients can be improved. It still does not search vulnerabilities in DB2 databases, for example."

"The implementation of the solution is quite complicated and could be easier."

"It would be beneficial if Burp Suite provided predefined payloads for each attack category, such as SQL injection and cross-site scripting, to automate some tasks more effectively."

"The stability of the scans could be improved."

"The solution is a bit expensive."

"The implementation of the solution is quite complicated and could be easier."

"The product needs to have the ability to evaluate more."

"PortSwigger Burp Suite Enterprise Edition should incorporate a static code analysis feature. One main issue we encounter is false positives. False positives can be challenging for developers."

"It would be better if the solution is cloud-based."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"We never had any issues with the licensing; the price was within our assigned limits."

"It is competitive in the security market."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"The price should be 20% lower"

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"Although the solution can be a bit expensive for small companies, its pricing is fairly reasonable for its capabilities."

"For Professional, it's about $400 per year."

"The tool's pricing is reasonable and costs around 400 dollars per year."

"PortSwigger Burp Suite Enterprise Edition is expensive compared to other solutions."

"PortSwigger Burp Suite Enterprise Edition is neither a cheap nor an expensive product. PortSwigger Burp Suite Enterprise Edition is a good tool for companies."