# Invicti: how AI models rank it, November 2026

Gane Index, November 2026 Edition. Named in 60 judge labels across 3 categories by 14 of 14 models. Page: https://www.gane.ai/index/it/vendors/invicti

## Standing by category

| Category | Share | Rank | Negative rate | Labels |
|---|---|---|---|---|
| [Dynamic application security testing](https://www.gane.ai/index/it/developer/dynamic-application-security-testing/index.md) | 33% | 1 | 12% | 51 |
| [Penetration testing as a service](https://www.gane.ai/index/it/security/penetration-testing-as-a-service/index.md) | 0% | 21 | 14% | 7 |
| [Attack surface management](https://www.gane.ai/index/it/security/attack-surface-management/index.md) | 0% | 110 | 50% | 2 |

## What the models said for it

- "Invicti leads on "proof-based scanning" — it actively exploits vulnerabilities to prove they are real, dramatically reducing false positives." (Kimi K2, DAST)
- "Invicti (formerly Netsparker) — Strong on accuracy/proof-based scanning; good for enterprises moving to fewer false positives." (Grok 4.20, DAST)
- "the tool most frequently cited as the "best all-around" choice for a mid-size B2B company is Invicti (formerly Netsparker)" (MiniMax M2.5, DAST)
- "I recommend Invicti (formerly Netsparker) as the top choice for a dynamic web application security scanner (DAST)." (Grok 4.20, DAST)

## And against it

- "it is advisable to avoid or proceed with extreme caution when using OWASP ZAP or Invicti in automated pipelines" (Mistral Small, DAST)
- "Do not buy these expecting broad organization-wide ASM." (Perplexity Sonar, ASM)
- "One 2026 benchmark showed 23% false positive rate — the highest among tested tools (though it had other strengths)" (Kimi K2, DAST)
- "some configurations of Invicti (formerly Acunetix in older forms; ~23% false positive rate in one test)" (Grok 4.20, DAST)

## By model

| Model | First choice | Alternative | Mention | Warning | Labels |
|---|---|---|---|---|---|
| Claude Haiku 4.5 | 1 | 1 | 0 | 0 | 2 |
| GPT-5.4 mini | 1 | 2 | 0 | 1 | 4 |
| Gemini 3.5 Flash | 1 | 2 | 3 | 0 | 6 |
| Perplexity Sonar | 2 | 1 | 1 | 1 | 5 |
| Grok 4.20 | 4 | 0 | 0 | 2 | 6 |
| Mistral Small | 2 | 1 | 1 | 1 | 5 |
| DeepSeek V4 Flash | 2 | 3 | 0 | 0 | 5 |
| Llama 4 Maverick | 1 | 1 | 1 | 0 | 3 |
| Qwen 3.7 Flash | 2 | 3 | 0 | 0 | 5 |
| Kimi K2 | 2 | 1 | 0 | 2 | 5 |
| GLM 4.7 FlashX | 1 | 2 | 1 | 0 | 4 |
| MiniMax M2.5 | 2 | 0 | 1 | 1 | 4 |
| GPT-6 Luna | 0 | 1 | 1 | 0 | 2 |
| Muse Glimmer 30B | 1 | 2 | 1 | 0 | 4 |

## Sources returned with these answers

The sites and pages cited by the answers that named Invicti, from 161 of the 174 answers that named it (only the models that return a source list).

### Domains cited

- softwaretestinghelp.com: 62
- invicti.com: 59 (its own site)
- safeguard.sh: 58
- aimultiple.com: 46
- immuniweb.com: 44
- checkmarx.com: 43
- securityboulevard.com: 43
- escape.tech: 37
- gane.ai/index: 34
- g2.com: 32

### Pages cited

- https://softwaretestinghelp.com/dynamic-application-security-testing-dast-software: 53
- https://immuniweb.com/resources/best-dast-tools: 41
- https://safeguard.sh/resources/blog/best-dast-tools-for-web-application-security-testing: 39
- https://aimultiple.com/dast-tools: 37
- https://checkmarx.com/learn/dast/dast-tools-key-features-and-12-solutions-to-know-in-2026: 29
- https://escape.tech/blog/top-dast-tools: 27
- https://augmentcode.com/tools/best-dast-tools-for-enterprise-security: 25
- https://securityboulevard.com/2026/04/dast-tools-complete-buyers-guide-10-solutions-to-know-in-2026: 25

## In its own words

What Invicti's own pages state, read 2026-09-28. Stated by the vendor, not checked by the index.

- Positioning: Web Application and API Security for Enterprise (https://invicti.com/)
- For: Enterprise (https://invicti.com/)
- Price stated: reports in under 24 hours for $500 or less (https://invicti.com/)
- Starting price: 500 (https://invicti.com/)
- Free plan or trial: proof-of-concept licenses (https://www.invicti.com/pricing)
- Integrations claimed: 110 (https://invicti.com/)
- Hosting: US, EU, CA
- Customers named: Channel 4, Park 'N Fly, Inc., SECWATCH, OECD, Unify (now Mitel), ISACA, OpenCart

## What it publishes

Every page invicti.com exposes, read 2026-09-29: 27800 addresses. By kind, pages and the last 90 days:

- blog: 1006 pages, 0 in the last 90 days, latest undated
- case study: 39 pages, 0 in the last 90 days, latest undated
- webinar or virtual event: 204 pages, 0 in the last 90 days, latest undated
- conference or event: 36 pages, 0 in the last 90 days, latest undated
- report or ebook: 126 pages, 0 in the last 90 days, latest undated
- comparison: 54 pages, 0 in the last 90 days, latest undated
- template or tool: 29 pages, 0 in the last 90 days, latest undated
- glossary or explainer: 90 pages, 0 in the last 90 days, latest undated
- podcast or video: 35 pages, 0 in the last 90 days, latest undated
- news or press: 170 pages, 0 in the last 90 days, latest undated

## Record

- Method: https://www.gane.ai/index/it/methodology
- License: CC BY 4.0. Cite as Gane Index, November 2026 Edition, www.gane.ai/index/it.