Invicti Web + API (formerly Acunetix)
Web application and API security scanner using dynamic testing (DAST) with proof-based, AI
Invicti Web + API (formerly Acunetix) is a dynamic application security testing (DAST) tool that discovers web applications, APIs, and LLM services, scans them for exploitable vulnerabilities, and validates findings with proof of exploit. It addresses the challenge of identifying and prioritizing real security risks across an organization's attack surface, including hidden and undocumented endpoints, while reducing false positives through runtime validation.
The platform offers comprehensive discovery across code, traffic, and runtime, AI-driven predictive risk scoring before scanning begins, and proof-based prioritization using runtime reachability and business context. It detects thousands of vulnerability types including OWASP Top 10, OWASP API Top 10, and business logic flaws. Key capabilities include stateful API testing for REST, GraphQL, and SOAP, authenticated scanning of role-based flows, coverage of single-page apps and JavaScript-heavy applications, and LLM service testing. Integrations connect with CI/CD pipelines, ticketing systems, WAFs, and security tools, with code-level traceability through DAST-to-SAST correlation and AI-assisted remediation guidance. Automated retesting confirms fixes, and agentic penetration testing coordinates specialized AI agents for multi-step attack simulation.
Invicti Web + API is packaged as a quote-based offering with flexible scanning coverage across first-party, open-source, internal, external, development, and production environments. An Agentic Pentest package covers a single application and its API suite with delivery within 24 hours. Proof of Concept licenses are available for evaluation before purchase. The platform supports cloud hosting, with on-premises deployment listed as coming soon.
12 alternatives to Invicti Web + API (formerly Acunetix)
Ranked by how well each tool replaces Invicti Web + API (formerly Acunetix): shared features, audience, price and popularity.
AI-powered continuous pentest platform for apps, APIs and cloud
Covers 0 of 15 key features.
61 out of 100 match$69/moApplication security built and trusted by hackers.
Covers 0 of 15 key features and has a free plan.
Free plan61 out of 100 matchContact salesAn AI agent platform that reasons across code, infrastructure and runtime to identify what
Covers 0 of 15 key features.
60 out of 100 matchContact salesInteractive online malware sandbox with threat intelligence
Covers 0 of 15 key features and has a free plan.
Free plan59 out of 100 matchFree- 58 out of 100 matchContact sales
The AI operating system for end-to-end third-party cyber risk management
Covers 0 of 15 key features and has a free plan.
Free plan58 out of 100 matchContact salesTap into the Future of Security Workflows
Covers 0 of 15 key features and is open source.
Open source57 out of 100 match—AI email security, endpoint security, AI assurance and security awareness training
Covers 0 of 15 key features.
57 out of 100 match$1.25/moContinuous Threat Exposure Management platform combining AI with a community of security
Covers 0 of 15 key features.
57 out of 100 matchContact salesThe always-on AI security engineer
Covers 0 of 15 key features, has a free plan and is open source.
Free planOpen source56 out of 100 matchFree- 56 out of 100 match—
Secure AI. Fearless Innovation.
Covers 0 of 15 key features and has a free plan.
Free plan56 out of 100 matchFree