Try our new research platform with insights from 80,000+ expert users

Invicti vs Tenable.io Web Application Scanning comparison

The compared Invicti and Tenable solutions aren't in the same category. Invicti is ranked #4 in DAST , with an average rating of 8.5, and holds a 8.3% mindshare in the category. Tenable is ranked #20 in AS , with an average rating of 8.5, and holds a 1.4% mindshare. Additionally, 96% of Invicti users are willing to recommend the solution, compared to 94% of Tenable users who would recommend it.
Invicti
Read 31 Invicti reviews
  • 3,717 Views
  • 855 Comparison Views
96% willing to recommend
Tenable.io Web Application ...
Read 18 Tenable.io Web Application Scanning reviews
  • 2,265 Views
  • 1,835 Comparison Views
94% willing to recommend
 

Comparison Buyer's Guide

Download the report
Executive SummaryUpdated on Oct 8, 2024

Invicti and Tenable.io Web Application Scanning compete in web application security. Tenable.io appears to have the upper hand due to its comprehensive feature set and market value, while Invicti stands out for pricing and support.

Features: Invicti is known for intuitive vulnerability detection, effective integration capabilities, and user-friendly interface. Tenable.io is recognized for extensive scanning coverage, detailed reporting, and a rich set of features conducive to diverse security assessments.

Room for Improvement: Invicti could enhance scalability, improve dashboard customization, and broaden scan depth. Tenable.io users point out the need for faster scan speeds, reduction in false positives, and simplified user interface.

Ease of Deployment and Customer Service: Invicti provides a straightforward deployment process with responsive customer support. Tenable.io, though robust, poses challenges with configuration complexity but benefits from highly-rated support.

Pricing and ROI: Invicti offers a favorable pricing model that aligns with swift ROI. Tenable.io, while a significant investment, is perceived as justified by the long-term benefits of its extensive feature set.

DOWNLOAD THE COMPLETE REPORT
To learn more, read our detailed Invicti vs. Tenable.io Web Application Scanning Report (Updated: October 2024).
Buyer's Guide
Invicti vs. Tenable.io Web Application Scanning
October 2024
Download the complete report
Helped 884,873 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Invicti
Average Rating
8.2
Reviews Sentiment
6.8
Number of Reviews
31
Ranking in other categories
Static Application Security Testing (SAST) (11th), Container Security (25th), Software Composition Analysis (SCA) (8th), API Security (8th), Dynamic Application Security Testing (DAST) (4th), Application Security Posture Management (ASPM) (5th)
Tenable.io Web Application ...
Average Rating
7.8
Reviews Sentiment
5.8
Number of Reviews
18
Ranking in other categories
Application Security Tools (20th)
 

Mindshare comparison

Invicti and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Invicti is designed for Dynamic Application Security Testing (DAST) and holds a mindshare of 8.3%, up 5.7% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.
Dynamic Application Security Testing (DAST) Mindshare Distribution
ProductMindshare (%)
Invicti8.3%
Veracode17.2%
Checkmarx One16.4%
Other58.1%
Dynamic Application Security Testing (DAST)
Application Security Tools Mindshare Distribution
ProductMindshare (%)
Tenable.io Web Application Scanning1.4%
SonarQube16.3%
Checkmarx One9.9%
Other72.4%
Application Security Tools
 

Featured Reviews

Valavan Sivgalingam - PeerSpot reviewer
Valavan Sivgalingam
Senior Manager, Security Engineering at ESS
Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations
It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.
Read full review
GR
Girish RAWAT
Project manager at Primus Software Corporation
Provides detailed reports that improve code maintainability while needing better coverage reports and technical support
Tenable.io Web Application Scanning provides a detailed report, identifying functions that are complex and need to be more maintainable and readable. It offers features such as generating an executive summary and detailed reports highlighting issues in specific lines of the code. However, it does not provide coverage reports in the free version, which is a limitation.
Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It has very good integration with the CI/CD pipeline."
"Invicti is a good product, and its API testing is also good."
"Netsparker has valuable features, including the ability to scan our website, an interactive approach, and security data integration."
"Scan, proxify the application, and then detailed report along with evidence and remediations to problems."
"The solution generates reports automatically and quickly."
"The scanner is light on the network and does not impact the network when scans are running."
"I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities."
"Invicti has done a commendable job with respect to ROI, and with respect to being a cost-effective solution and one of the market leaders as an effective solution for SAST and DAST, Invicti has performed very well."
More Invicti pros
"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."
"The solution is stable."
"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."
"The most valuable feature is the reporting, which provides a good level of detail with respect to vulnerabilities."
"The solution's instant reports feature is the most effective for detecting threats."
"It collects the vulnerabilities on the hostnames and sends them to the Tenable.io cloud. Tenable has its own cloud where Tenable.io is running, but there are many connectors to other cloud solutions. Tenable can do vulnerability scanning for other cloud managers such as Azure, Amazon, and so on."
"Our customers adopt this solution because of the replication testing and the vulnerability assessment it can do. It is a multi-faceted product."
"Tenable provides the end analysis results covering all the published vulnerabilities and information on the market."
More Tenable.io Web Application Scanning pros
 

Cons

"They need to improve their support in the documentation. Their support mechanism is missing. Their responsiveness, technical staff, and these types of things need to be improved, and comprehensive documentation is required. They should have good self-service portal enhancement"
"The proxy review, the use report views, the current use tool and the subset requests need some improvement. It was hard to understand how to use them."
"It would be better for listing and attacking Java-based web applications to exploit vulnerabilities."
"The scanning time, complexity, and authentication features of Invicti could be improved."
"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."
"The licensing model should be improved to be more cost-effective. There are URL restrictions that consume our license. Compared to other DAST solutions and task tools like WebInspect and Burp Enterprise, Invicti is very expensive. The solution’s scanning time is also very long compared to other DAST tools. It might be due to proof-based scanning."
"Netsparker doesn't provide the source code of the static application security testing."
"Invicti takes too long with big applications, and there are issues with the login portal."
More Invicti cons
"It isn't easy to manage vulnerabilities in Tenable."
"The platform's technical support services could be better."
"Tenable.io Web Application Scanning conducts a general scan, which wastes time. The scan needs to be specific."
"The solution's dashboards could be improved and made more user-friendly."
"Tenable.io Web Application Scanning could improve by offering faster fuzzing."
"The technical support needs improvement. Currently, it takes time, which might be due to the free version, but providing some level of support could encourage future purchase decisions."
"The reporting has a very limited customization capability."
"The report customization needs to be better."
More Tenable.io Web Application Scanning cons
 

Pricing and Cost Advice

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."
"OWASP Zap is free and it has live updates, so that's a big plus."
"The price should be 20% lower"
"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."
"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."
"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."
"We never had any issues with the licensing; the price was within our assigned limits."
"It is competitive in the security market."
More Invicti pricing and cost advice
"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."
"It follows the same licensing scheme as Tenable.io and Tenable. sc."
"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."
"Tenable.io Web Application Scanning is expensive for small businesses."
"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."
"The pricing is okay."
"I rate the product's pricing a four out of ten."
report
See which vendors are best for you
Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.
See recommendations
884,873 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Manufacturing Company
9%
Computer Software Company
9%
Government
7%
Financial Services Firm
12%
Computer Software Company
10%
Manufacturing Company
9%
Government
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business14
Midsize Enterprise4
Large Enterprise13
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise7
 

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?
The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...
See all answers
What needs improvement with Invicti?
At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...
See all answers
What is your primary use case for Invicti?
I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...
See all answers
What needs improvement with Tenable.io Web Application Scanning?
If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.
See all answers
What advice do you have for others considering Tenable.io Web Application Scanning?
I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...
See all answers
What is your experience regarding pricing and costs for Tenable.io Web Application Scanning?
I think the price is expensive. We do not have an idea of how much we have to pay approximately, but comparing to other products, Tenable.io Web Application Scanning is expensive.
See all answers
 

Comparisons

Acunetix vs Invicti Logo
Acunetix vs Invicti
Compared 9% of the time
Veracode vs Invicti Logo
Veracode vs Invicti
Compared 8% of the time
SonarQube vs Invicti Logo
SonarQube vs Invicti
Compared 6% of the time
OpenText Dynamic Application Security Testing vs Invicti Logo
OpenText Dynamic Application Security Testing vs Invicti
Compared 5% of the time
Kondukto vs Invicti Logo
Kondukto vs Invicti
Compared 2% of the time
More Invicti Competitors
Acunetix vs Tenable.io Web Application Scanning Logo
Acunetix vs Tenable.io Web Application Scanning
Compared 9% of the time
Qualys Web Application Scanning vs Tenable.io Web Application Scanning Logo
Qualys Web Application Scanning vs Tenable.io Web Application Scanning
Compared 7% of the time
CrowdStrike Falcon Cloud Security vs Tenable.io Web Application Scanning Logo
CrowdStrike Falcon Cloud Security vs Tenable.io Web Application Scanning
Compared 6% of the time
PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning Logo
PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning
Compared 6% of the time
Virsec Security Platform vs Tenable.io Web Application Scanning Logo
Virsec Security Platform vs Tenable.io Web Application Scanning
Compared 3% of the time
More Tenable.io Web Application Scanning Competitors
 

Product Reports

Buyer's Guide
Invicti
March 2026
Invicti reportDownload Invicti product report
Buyer's Guide
Application Security Tools
February 2026
Tenable.io Web Application Scanning reportDownload Tenable.io Web Application Scanning product report
 

Also Known As

Netsparker
No data available
 

Overview

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Invicti

Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.

Tenable
 

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank
IMDEX
Buyer's Guide
Invicti vs. Tenable.io Web Application Scanning
October 2024
Free Report: Invicti vs. Tenable.io Web Application Scanning
Find out what your peers are saying about Invicti vs. Tenable.io Web Application Scanning and other solutions. Updated: October 2024.
DOWNLOAD NOW
884,873 professionals have used our research since 2012.
See our Invicti vs. Tenable.io Web Application Scanning report.

We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.