Invicti vs Tenable.io Web Application Scanning comparison

The compared Invicti and Tenable solutions aren't in the same category. Invicti is ranked #5 in DAST , with an average rating of 8.5, and holds a 7.9% mindshare in the category. Tenable is ranked #15 in AS , with an average rating of 8.5, and holds a 1.4% mindshare. Additionally, 96% of Invicti users are willing to recommend the solution, compared to 94% of Tenable users who would recommend it.

Invicti

Read 31 Invicti reviews

3,137 Views
690 Comparison Views

96% willing to recommend

Tenable.io Web Application ...

Read 18 Tenable.io Web Application Scanning reviews

1,996 Views
1,597 Comparison Views

94% willing to recommend

Invicti

Tenable.io Web Application ...

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 8, 2024

Invicti and Tenable.io Web Application Scanning compete in web application security. Tenable.io appears to have the upper hand due to its comprehensive feature set and market value, while Invicti stands out for pricing and support.

Features: Invicti is known for intuitive vulnerability detection, effective integration capabilities, and user-friendly interface. Tenable.io is recognized for extensive scanning coverage, detailed reporting, and a rich set of features conducive to diverse security assessments.

Room for Improvement: Invicti could enhance scalability, improve dashboard customization, and broaden scan depth. Tenable.io users point out the need for faster scan speeds, reduction in false positives, and simplified user interface.

Ease of Deployment and Customer Service: Invicti provides a straightforward deployment process with responsive customer support. Tenable.io, though robust, poses challenges with configuration complexity but benefits from highly-rated support.

Pricing and ROI: Invicti offers a favorable pricing model that aligns with swift ROI. Tenable.io, while a significant investment, is perceived as justified by the long-term benefits of its extensive feature set.

To learn more, read our detailed Invicti vs. Tenable.io Web Application Scanning Report (Updated: October 2024).

Buyer's Guide

Invicti vs. Tenable.io Web Application Scanning

October 2024

Download the complete report

Helped 881,082 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Invicti

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (11th), Container Security (25th), Software Composition Analysis (SCA) (8th), API Security (9th), Dynamic Application Security Testing (DAST) (5th), Application Security Posture Management (ASPM) (5th)

Tenable.io Web Application ...

Average Rating

7.8

Reviews Sentiment

5.8

Number of Reviews

Ranking in other categories

Application Security Tools (15th)

Mindshare comparison

Invicti and Tenable.io Web Application Scanning aren’t in the same category and serve different purposes. Invicti is designed for Dynamic Application Security Testing (DAST) and holds a mindshare of 7.9%, up 5.3% compared to last year.
Tenable.io Web Application Scanning, on the other hand, focuses on Application Security Tools, holds 1.4% mindshare, up 1.2% since last year.

Dynamic Application Security Testing (DAST) Market Share Distribution
Product	Market Share (%)
Invicti	7.9%
Veracode	19.4%
Checkmarx One	17.2%
Other	55.5%

Dynamic Application Security Testing (DAST)

Application Security Tools Market Share Distribution
Product	Market Share (%)
Tenable.io Web Application Scanning	1.4%
SonarQube	17.9%
Checkmarx One	10.2%
Other	70.5%

Application Security Tools

Featured Reviews

Valavan Sivgalingam

Senior Manager, Security Engineering at ESS

Dynamic testing regularly identifies web vulnerabilities and has strong false positive confirmations

It has good false positive confirmations, confirmed issues identification, and proof of exploit-related features as part of it. We use Invicti for these things in our portfolios. The solution includes Proof-Based Scanning technology. Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios. For both the API endpoints and web applications, we do regular testing on a monthly basis for all our releases. Invicti does a good job. The only concern is on the performance side, but other than that, we find it really helpful in identifying web vulnerabilities. A full scan takes more time based on your website and other factors, but for us, it takes more than two to three days. The scan performance can be improved upon. When we check with them, they discuss proof-based scanning and related aspects. However, there could be intermittent results that could help us.

Read full review

Jonathan-Pereira

Cyber Security Architect at a comms service provider with 10,001+ employees

Centralized license management transforms asset manipulation based on functions and improves security posture

Now that the license is centralized, it's a significant feature to manipulate assets based on their functions. It provides a centralized view from end-to-end to its assets' identities and vulnerabilities. One of the greatest features is Kubernetes. The automated scanning capability is pretty standard in the market, and Tenable's prioritization engine helps improve the security posture.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The best features of Invicti are its ability to confirm access vulnerabilities, SSL injection vulnerabilities, and its connectors to other security tools."

"One of the features I like about this program is the low number of false positives and the support it offers."

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"Scan, proxify the application, and then detailed report along with evidence and remediations to problems."

"The solution generates reports automatically and quickly."

"I am impressed by the whole technology that they are using in this solution. It is really fast. When using netscan, the confirmation that it gives on the vulnerabilities is pretty cool. It is really easy to configure a scan in Netsparker Web Application Security Scanner. It is also really easy to deploy."

"The scanner is light on the network and does not impact the network when scans are running."

"I would rate the stability as ten out of ten."

More Invicti pros

"We can get detailed information about vulnerabilities."

"The solution's instant reports feature is the most effective for detecting threats."

"All the features are valuable to us as they offer cutting-edge scanning methods and address the latest issues with a contemporary approach. Tenable.io Web Application Scanning is highly stable. I rate it a nine out ten. Since the solution works on the Cloud, it's highly scalable. I rate the scalability a nine out of ten. The setup of the solution is straightforward. The Return on Investment is substantial. I recommend the solution to all."

"Tenable.io Web Application Scanning provides a detailed report, identifying functions that are complex and need to be more maintainable and readable."

"The most effective feature of the product is the ability to scan the entire environment."

"The most valuable features of Tenable.io Web Application Scanning are the integration into specific use cases and scanning. All of the features of the solution are useful."

"We use the tool for our websites. We have a vulnerable subdomain. The tool helps to scan it for vulnerabilities."

"The initial setup is straightforward."

More Tenable.io Web Application Scanning pros

Cons

"They don't really provide the proof of concept up to the level that we need in our organization. We are a consultancy firm, and we provide consultancy for the implementation and deployment solutions to our customers. When you run the scans and the scan is completed, it only shows the proof of exploit, which really doesn't work because the tool is running the scan and exploiting on the read-only form. You don't really know whether it is actually giving the proof of exploit. We cannot prove it manually to a customer that the exploit is genuine. It is really hard to perform it manually and prove it to the concerned development, remediation, and security teams. It is currently missing the static application security part of the application security, especially web application security. It would be really cool if they can integrate a SAS tool with their dynamic one."

"The support's response time could be faster since we are in different time zones."

"They could enhance the support for data swap testing for the platform."

"Asset scanning could be better. Once, it couldn't scan assets, and the issue was strange. The price doesn't fit the budget of small and medium-sized businesses."

"The custom attack preparation screen might be improved."

"Maybe the ability to make a good reporting format is needed."

"Currently, there is nothing I would like to improve."

"Invicti's reporting capabilities need enhancement."

More Invicti cons

"The technical support should be improved. Currently, some attacks are detected while others are not."

"It would be great if there were a dashboard that is more user-friendly."

"Tenable.io Web Application Scanning could improve by offering faster fuzzing."

"The technical support needs improvement. Currently, it takes time, which might be due to the free version, but providing some level of support could encourage future purchase decisions."

"I would like for them to add proxy filtering, where you can transfer and alter the package. It is fully automated. Other web application testers programs are actually proxy software, and the proxy software gives you the flexibility of modifying the outgoing package, which will actually help you in exploiting any vulnerability in detail."

"The report customization needs to be better."

"The reporting has a very limited customization capability."

"The cloud and the on-premises versions have their own controllers, and there is no way to centrally manage controllers."

More Tenable.io Web Application Scanning cons

Pricing and Cost Advice

"I think that price it too high, like other Security applications such as Acunetix, WebInspect, and so on."

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"We never had any issues with the licensing; the price was within our assigned limits."

"It is competitive in the security market."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"OWASP Zap is free and it has live updates, so that's a big plus."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

More Invicti pricing and cost advice

"It follows the same licensing scheme as Tenable.io and Tenable. sc."

"The application is extremely affordable. There are no additional costs involved with licensing. We switched to Tenable.io Web Application Scanning from other solutions due to pricing."

"Tenable.io Web Application Scanning is expensive for small businesses."

"The price of the solution is reasonable compared to the competitors. The license cost is based on the number of users and the annual usage."

"The pricing is okay."

"For Tenable.io Web Application Scanning, it comes to around 6,50,000 Indian rupees, plus taxes."

"I rate the product's pricing a four out of ten."

See which vendors are best for you

Use our free recommendation engine to learn which Dynamic Application Security Testing (DAST) solutions are best for your needs.

See recommendations

881,082 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Computer Software Company

11%

Manufacturing Company

Government

Financial Services Firm

13%

Computer Software Company

10%

Government

Manufacturing Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	13

By reviewers
Company Size	Count
Small Business	7
Midsize Enterprise	5
Large Enterprise	7

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...

See all answers

What needs improvement with Invicti?

At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...

See all answers

What is your primary use case for Invicti?

I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...

See all answers

What do you like most about Tenable.io Web Application Scanning?

The most effective feature of the product is the ability to scan the entire environment.

See all answers

What needs improvement with Tenable.io Web Application Scanning?

If there were a solution, I would like to see automation and an integrated remediation solution for vulnerability or patch management.

See all answers

What advice do you have for others considering Tenable.io Web Application Scanning?

I do not understand what API approach means; I do not understand this term. I think Tenable.io Web Application Scanning is the best option on the market at the moment. My review rating for this pro...

See all answers

Comparisons

Acunetix vs Invicti

Compared 16% of the time

SonarQube vs Invicti

Compared 8% of the time

Veracode vs Invicti

Compared 7% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 6% of the time

PortSwigger Burp Suite Professional vs Invicti

Compared 3% of the time

More Invicti Competitors

Acunetix vs Tenable.io Web Application Scanning

Compared 14% of the time

CrowdStrike Falcon Cloud Security vs Tenable.io Web Application Scanning

Compared 9% of the time

Qualys Web Application Scanning vs Tenable.io Web Application Scanning

Compared 8% of the time

PortSwigger Burp Suite Professional vs Tenable.io Web Application Scanning

Compared 7% of the time

Checkmarx One vs Tenable.io Web Application Scanning

Compared 4% of the time

More Tenable.io Web Application Scanning Competitors

Product Reports

Buyer's Guide

Invicti

January 2026

Download Invicti product report

Buyer's Guide

Application Security Tools

January 2026

Tenable.io Web Application Scanning report

Download Tenable.io Web Application Scanning product report

Also Known As

Netsparker

No data available

Overview

Invicti helps DevSecOps teams automate security tasks and save hundreds of hours each month by identifying web vulnerabilities that matter. Combining dynamic with interactive testing (DAST + IAST) and software composition analysis (SCA), Invicti scans every corner of an app to find what other tools miss with 99.98% accuracy, delivering on the promise of Zero Noise AppSec. Invicti helps discover all web assets — even ones that are lost, forgotten, or created by rogue departments. With an array of out-of-the-box integrations, DevSecOps teams can get ahead of their workloads to hit critical deadlines, improve processes, and communicate more effectively while reducing risk and hitting the ROI goals.

Invicti

Tenable.io Web Application Scanning safely, accurately and automatically scans your web applications, providing deep visibility into vulnerabilities and valuable context to prioritize remediation.

Tenable

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank

IMDEX

Buyer's Guide

Invicti vs. Tenable.io Web Application Scanning

October 2024

Free Report: Invicti vs. Tenable.io Web Application Scanning

Find out what your peers are saying about Invicti vs. Tenable.io Web Application Scanning and other solutions. Updated: October 2024.

DOWNLOAD NOW

881,082 professionals have used our research since 2012.

See our Invicti vs. Tenable.io Web Application Scanning report.

We monitor all Dynamic Application Security Testing (DAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.