Invicti vs Wallarm NG WAF comparison

Why PeerSpot?

Invicti and Wallarm are both solutions in the API Security category. Invicti is ranked #12 with an average rating of 8.5, while Wallarm is ranked #15. Invicti holds a 4.0% mindshare in APIS, compared to Wallarm’s 3.4% mindshare. Additionally, 96% of Invicti users are willing to recommend the solution, compared to 100% of Wallarm users who would recommend it.

Invicti

Read 31 Invicti reviews

8,384 Views
1,174 Comparison Views

96% willing to recommend

Wallarm NG WAF

Read 5 Wallarm NG WAF reviews

2,492 Views
997 Comparison Views

100% willing to recommend

Invicti

Wallarm NG WAF

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

Invicti and Wallarm NG WAF are competing products in cybersecurity. Wallarm NG WAF is perceived as having an advantage in features, making it a preferred choice for comprehensive protection.

Features: Invicti offers comprehensive scanning for vulnerabilities like SQL injection and cross-site scripting, proof-based scanning to reduce false positives, and robust integration with security tools. Wallarm NG WAF features AI-driven threat detection, real-time threat protection adaptable to evolving threats, and seamless integration with cloud environments for enhanced security.

Room for Improvement: Invicti could enhance its cloud environment integration, expand its AI threat detection capabilities, and offer more flexible deployment options. Wallarm NG WAF might benefit from improving its reporting functionalities, reducing complexity in user interface design, and minimizing the learning curve for new users.

Ease of Deployment and Customer Service: Invicti offers straightforward deployment suitable for various enterprise needs and is supported by responsive customer service. Wallarm NG WAF provides flexible deployment options across cloud, hybrid, and on-premises environments, with an emphasis on rapid technical support and comprehensive customer service.

Pricing and ROI: Invicti generally offers a competitive setup cost, appealing to budget-conscious buyers. Wallarm NG WAF may involve a higher initial investment but delivers substantial ROI with its advanced features, appealing to organizations prioritizing long-term security benefits.

To learn more, read our detailed Invicti vs. Wallarm NG WAF Report (Updated: September 2026).

Buyer's Guide

Invicti vs. Wallarm NG WAF

September 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Invicti

Ranking in API Security

12th

Average Rating

8.2

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Static Application Security Testing (SAST) (15th), Container Security (32nd), Software Composition Analysis (SCA) (16th), Dynamic Application Security Testing (DAST) (5th), Application Security Posture Management (ASPM) (12th)

Wallarm NG WAF

Ranking in API Security

15th

Average Rating

8.6

Reviews Sentiment

6.8

Number of Reviews

Ranking in other categories

Web Application Firewall (WAF) (39th)

Mindshare comparison

As of November 2026, in the API Security category, the mindshare of Invicti is 4.0%, up from 2.6% compared to the previous year. The mindshare of Wallarm NG WAF is 3.4%, down from 4.2% compared to the previous year. It is calculated based on PeerSpot user engagement data.

API Security Mindshare Distribution
Product	Mindshare (%)
Invicti	4.0%
Wallarm NG WAF	3.4%
Other	92.6%

API Security

Featured Reviews

PrashantUppuluri

Solution Architect at a tech services company with 51-200 employees

Automated scanning has strengthened web application security and supports hybrid protection

A good scanning engine is what I appreciate about Invicti. When you want to find out the vulnerabilities within your web applications, Invicti has done a thorough job with respect to filtering out the vulnerabilities and identifying the risk factors with respect to the security modules within the solution. Invicti does have a segment of the solution which works on the automated scanning engine. As long as the license is active, the scanners that work within the solution are pretty effective. With respect to SAST and DAST, being a real-time scanning engine is one of the portfolios and one of the selling factors of the solution. Invicti is known to be a solution that works within the hybrid environment, be it cloud, on-premises, or a mix and match across multiple marketplaces. It does a thorough job. Most importantly, Invicti is a very good SAST and DAST solution that is very competitive in the market with respect to competitors. Invicti is a part of the Magic Quadrant with respect to Gartner's Magic Quadrant and has made a very good customer database and pipeline within the marketplace locally. With respect to security impacts in terms of support, Invicti is pretty much supportive. With respect to use cases or the POCs I have run on the solution, we have identified a couple of vulnerabilities and Invicti was able to trace them, detect, and quarantine the attacks.

Read full review

it_user796242

Information Security Engineer at a tech vendor with 51-200 employees

Helps us to monitor attacks to our sites and prevents a lot of them

Set up Wallarm as a reverse proxy. Do not replace your web server. Use Wallarm first in monitoring mode, then learn from Wallarm which type of request is false positive and which type of request is not. This process takes a couple of weeks for very highly-loaded web applications (few millions of unique visitors in one month). Then you can turn Wallarm into blocking mode and everything will be fine. Do not forget to build a monitoring system, the wave, and API for it. Before we started using Wallarm, I already knew Ivan (CEO) and Stepan (COO) from a couple of years before. Ivan had his own security company and Stepan was working on a Russian security magazine called Xakep. They told us that they wanted to create a new WAF and already had a working version of it. They asked me to test it. We did tests, and it was really good. After few month after testing, we signed an agreement. Our choice was made not because we knew these guys for a long time, but because the product was really cool and we were glad to start using it as one of the first on the market!

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Invicti's proactive scanning measures vulnerabilities each time we deploy or push code to a new environment."

"It has very good integration with the CI/CD pipeline."

"Invicti is part of our SSDLC portfolio, and DAST dynamic testing is very important for our web applications and portfolios."

"I am impressed with Invictus’ proof-based scanning. The solution has reduced the incidence of false positive vulnerabilities. It has helped us reduce our time and focus on vulnerabilities."

"Invicti is a good product, and its API testing is also good."

"The dashboard is really cool, and the features are really good. It tells you about the software version you're using in your web application. It gives you the entire technology stack, and that really helps. Both web and desktop apps are good in terms of application scanning. It has a lot of security checks that are easily customizable as per your requirements. It also has good customer support."

"I'd recommend Netsparker for anyone who wants to make a security assessment for web applications."

"Invicti has done a commendable job with respect to ROI, and with respect to being a cost-effective solution and one of the market leaders as an effective solution for SAST and DAST, Invicti has performed very well."

More Invicti pros

"Helps us to monitor situation in regards to attacks to our sites and prevents a lot of them."

"They are the only solution that fits our success criteria and business objectives: WAF must have a low (<5%) false negative rate and be ready to protect from all well-known web attacks."

"Perimeter control and active vulnerability scanner are the most valuable features."

"Vulnerability scanner and WAF are valuable features."

"With active threat detection, we are no longer over-swamped with tons of useless events."

"The most powerful feature is the ability to first learn what type of query to make to your web application when it is attacked and what type of query creates a false positive to your app."

Cons

"They could enhance the support for data swap testing for the platform."

"Improvement could be made in the area of production."

"Invicti's reporting capabilities need enhancement. We need enterprise-level information instead of repo-level details. Unlike Appiro, Invicti does not provide portfolio-level insights into vulnerability remediation over time."

"Netsparker is one of the costliest products in the market. The licensing is tied to the URL, and it's restricted."

"The scanner itself should be improved because it is a little bit slow."

"Invicti takes too long with big applications, and there are issues with the login portal."

"I find that the scannings are not sufficiently updated."

"The scan performance can be improved upon."

More Invicti cons

"The biggest problem for us was the stability and speed using the first version of Wallarm. Now, it is fine."

"It needs more customization in PDF reports."

"Wallarm uses a learning mechanism to detect attacks and to avoid false positives. If Wallarm blocks some illegitimate request, then you can go to the management console and mark this request as false positive, but sometimes this does not work properly."

"Technical support is 6 or 7 out of 10. Sometimes we have had trouble with communication and understanding."

"There were several stability issues during the first pilot."

Pricing and Cost Advice

"Netsparker is one of the costliest products in the market. It would help if they could allow us to scan multiple URLs on the same license."

"We are using an NFR license and I do not know the exact price of the NFR license. I think 20 FQDN for three years would cost around 35,000 US Dollars."

"The price should be 20% lower"

"It is competitive in the security market."

"We never had any issues with the licensing; the price was within our assigned limits."

"The solution is very expensive. It comes with a yearly subscription. We were paying 6000 dollars yearly for unlimited scans. We have three licenses; basic, business, and ultimate. We need ultimate because it has unlimited scan numbers."

"OWASP Zap is free and it has live updates, so that's a big plus."

"Invicti is best suited for large enterprises. I don't think small and medium-sized businesses can afford it. Maintenance costs aren't that great."

More Invicti pricing and cost advice

"Pricing must be cheaper than the competition and the licensing must be good."

See which vendors are best for you

Use our free recommendation engine to learn which API Security solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

13%

Manufacturing Company

Construction Company

Government

Financial Services Firm

21%

Government

11%

Manufacturing Company

Insurance Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	14
Midsize Enterprise	4
Large Enterprise	13

No data available

Questions from the Community

What is your experience regarding pricing and costs for Netsparker Web Application Security Scanner?

The setup cost is pretty competitive. For example, if you want to talk about the SAST license, it comes to about $150 or sometimes less than $100, depending on the conversion or the number of licen...

See all answers

What needs improvement with Invicti?

At this time, there is nothing that comes to mind. However, most of the products in the market are pretty much neck-to-neck competitors. Speaking about it, there are a couple of factors which they ...

See all answers

What is your primary use case for Invicti?

I have worked on a couple of products, specifically in web application security. I have worked on Invicti, and with respect to PAM, I have worked with BeyondTrust. I have not worked specifically fo...

See all answers

Ask a question

Earn 20 points

Comparisons

Veracode vs Invicti

Compared 7% of the time

Invicti Web + API vs Invicti

Compared 6% of the time

OpenText Dynamic Application Security Testing vs Invicti

Compared 5% of the time

Checkmarx One vs Invicti

Compared 4% of the time

Snyk vs Invicti

Compared 4% of the time

More Invicti Competitors

Imperva Application Security Platform vs Wallarm NG WAF

Compared 13% of the time

Salt Security vs Wallarm NG WAF

Compared 11% of the time

Venusense Web Application Firewall vs Wallarm NG WAF

Compared 9% of the time

Cloudflare vs Wallarm NG WAF

Compared 6% of the time

Fortinet FortiWeb vs Wallarm NG WAF

Compared 4% of the time

More Wallarm NG WAF Competitors

Product Reports

Buyer's Guide

Invicti

October 2026

Download Invicti product report

Buyer's Guide

Web Application Firewall (WAF)

October 2026

Download Wallarm NG WAF product report

Also Known As

Netsparker

Wallarm NG-WAF

Overview

Invicti offers advanced web application security testing focused on identifying vulnerabilities like SQL injection and cross-site scripting. Its Proof-Based Scanning minimizes false positives and integrates seamlessly with CI/CD pipelines, making it an effective tool for enterprise environments.

Invicti provides comprehensive scanning capabilities that include detecting and verifying critical vulnerabilities and security data consolidation. Its scalable scanning engine and robust API support allow for flexible testing across diverse environments, including web and API testing. Despite some drawbacks like limited single sign-on integration and slow scanning speeds for large applications, Invicti remains a popular choice for automating security assessments, ensuring compliance with standards like OWASP Top 10, PCI DSS, and GDPR.

What are the key features of Invicti?

Comprehensive Vulnerability Scanning: Detects vulnerabilities like SQL injection and XSS.
Proof-Based Scanning: Confirms exploitability and reduces false positives.
CI/CD Integration: Seamlessly integrates with development pipelines.
Security Data Consolidation: Centralizes data for better insights.
User-Friendly Interface: Facilitates easy analysis and reporting.
Scalable Scanning Engine: Supports testing in enterprise environments.
Robust API Support: Enhances flexibility in testing.

What benefits and ROI should users look for in reviews?

Proactive Security: Actively identifies and verifies vulnerabilities to prevent breaches.
Regulatory Compliance: Helps maintain compliance with standards like PCI DSS and GDPR.
Efficient Vulnerability Management: Aids in prioritizing remediation efforts.
Integration Capabilities: Streamlines processes with CI/CD pipeline compatibility.

In industries like finance, healthcare, and e-commerce, Invicti is implemented to bolster security through automated vulnerability assessments. Its ability to provide insightful reports and remediation suggestions assists companies in efficiently managing security risks and achieving compliance with critical regulatory standards.

Invicti

Wallarm NG WAF provides advanced security by integrating machine learning, making it essential for modern web applications. It offers protection against sophisticated threats and automates many processes.

Wallarm NG WAF leverages AI-driven technology to deliver robust security measures. It helps in defending web applications from cybersecurity threats with enhanced threat detection and response capabilities. Beyond vulnerability insights, Wallarm enhances security protocols, scales with growing online demands, and ensures comprehensive threat coverage, fostering a safer web environment.

What are the key features of Wallarm NG WAF?

AI-Powered Threat Detection: Identifies and mitigates sophisticated attacks efficiently.
Automated Security Updates: Continuously updates defense strategies without manual intervention.
Flexible Deployment: Easily integrates across cloud, on-premise, and hybrid setups.
Scalability: Adapts to growing traffic volumes with consistent protection.
Detailed Reporting: Provides comprehensive analytics on web security posture.

What benefits can users expect from Wallarm NG WAF?

Increased Security: Enhances threat detection and reduces vulnerabilities.
Operational Efficiency: Reduces manual intervention with automated tasks.
Cost-Effectiveness: Optimizes security expenditure by preventing potential breaches.
Time Savings: Automates repetitive actions, saving valuable time for IT teams.

In industries like finance, e-commerce, and healthcare, Wallarm NG WAF is implemented to ensure data protection and compliance with stringent security standards. Its adaptability allows it to meet industry-specific requirements, offering specialized configurations tailored to each sector's unique demands.

Wallarm

Sample Customers

Samsung, The Walt Disney Company, T-Systems, ING Bank

Panasonic. Miro. Rappi. Wargaming. Gannett. Omio. Acronis. Workforce Software. Tipalti. SEMRush.

Buyer's Guide

Invicti vs. Wallarm NG WAF

September 2026

Free Report: Invicti vs. Wallarm NG WAF

Find out what your peers are saying about Invicti vs. Wallarm NG WAF and other solutions. Updated: September 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

See our Invicti vs. Wallarm NG WAF report.

See our list of best API Security vendors.

We monitor all API Security reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.