標題搜尋：
⭠ 左右滾動 ⭢
- Invicti - Web + API Vulnerability Scanning Platform
-
類別Information Security Software
-
介紹Invicti (integrating the technologies formerly known as Acunetix and Netsparker) is a leading global application security platform designed to help enterprises automate and scale AppSec (Application Security). Invicti Web + API is an integrated platform that combines Dynamic Application Security Testing (DAST) with API security. Powered by its proprietary Proof-Based Scanning™ vulnerability validation technology and AI-assisted analysis, the platform can automatically inventory web and API attack surfaces from a single management interface, accurately validate exploitab
Invicti - Web + API
- Industry-Leading DAST + IAST with Proof-Based Scanning™
Powered by Invicti’s core Dynamic Application Security Testing technology, you no longer need to waste time manually verifying false positives. Once a vulnerability is detected, Invicti automatically simulates a real-world attack to confirm its exploitability.
• Proof-of-Exploit Verification: Automatically triggers safe, read-only proof-of-concept exploits on suspected vulnerabilities to confirm real-world exploitability, delivering up to 99.98% accuracy.
• Zero False Positives & No Manual Triage: Eliminates manual false-positive verification, allowing security and development teams to immediately focus on remediating genuine, high-risk threats.
• Modern Web & AI-Guided Scanning: Fully supports HTML5, Single Page Applications (SPAs such as React, Angular, and Vue), and complex authentication mechanisms (OAuth2, JWT, SSO). Leverages AI to seamlessly navigate business logic and bypass CAPTCHAs.
• Interactive Application Security Testing (IAST): Uses embedded IAST agents deep within the application runtime to pinpoint vulnerabilities down to the exact line of code and SQL query, accelerating diagnosis.
- Comprehensive API Security
As microservices and cloud architectures expand, APIs have become a primary attack surface. Invicti Web + API delivers deep, proactive API defense.
• Broad Protocol & Specification Support: Covers RESTful, GraphQL, and SOAP/WSDL architectures, with direct ingestion of OpenAPI (Swagger) specifications and Postman Collections.
• Multi-Layer Automated API Discovery: Automatically uncovers unmanaged Shadow APIs and abandoned Zombie APIs, completely eliminating security blind spots.
• Dedicated OWASP API Top 10 Coverage: Deeply tests for critical logic vulnerabilities, including BOLA/IDOR (Broken Object Level Authorization), BFLA, unauthorized access, and excessive data exposure.
- Continuous Asset Discovery
You cannot secure what you do not know exists. Invicti’s continuous discovery engine proactively identifies and tracks all web and API assets across your organization.
Automate regular scans – so you can be confident you’ll catch new vulnerabilities quickly.
• Uncover Forgotten Assets: Automatically discovers forgotten subdomains, staging/test environments, public-facing services, and idle applications.
• Visual Asset Management: Delivers a unified dashboard that provides real-time visibility into the security posture of all external web and API assets, allowing you to onboard them into scheduled scans with a single click.
- AI-Assisted Automated Vulnerability Prioritization
Provides code-level remediation guidance and leverages AI to filter out alert noise, helping developers remediate flaws faster.
• AI-Driven Risk Analysis: Analyzes vulnerability reachability, exploitability, and business impact to present an actionable list focused strictly on real, impactful risks.
- Predictive Risk Scoring
Leverages extensive historical data and AI analytics to grade and prioritize risk profiles across all web applications and APIs.
• Actionable Prioritization: Helps security teams identify high-risk applications and severe vulnerabilities first, ensuring resources are concentrated on the most pressing threats.
- Seamless DevSecOps Integration
Shifts security testing left, identifying vulnerabilities early during the development and testing phases.
• Bi-Directional CI/CD & Ticketing Integration: Offers native integrations with leading enterprise platforms, including Jira, GitHub, Jenkins, Azure DevOps, GitLab, and ServiceNow.
• Automated Workflows: Automatically logs tickets for verified vulnerabilities directly to developers. Once fixed, re-testing is automatically triggered with zero human intervention required.
- Compliance Reporting
Includes built-in report templates for major international security standards, generated with one click for effortless audits and vendor security assessments.
• Supported Frameworks: PCI DSS, OWASP Top 10, OWASP API Top 10, HIPAA, ISO 27001, GDPR, CWE/SANS, and more.
Why Choose Invicti Web + API?
• Unmatched Accuracy: Drastically reduces false positives using patented Proof-Based Scanning™, saving teams hundreds of hours in manual verification.
• High Scalability: Effortlessly scales and provides centralized management, whether securing a single web application or managing thousands across a global enterprise.
• Unified Single Platform: Breaks down silos between web and API scanning, delivering total visibility and control over modern applications and runtime security risks from a single pane of glass.
About Invicti & Official Taiwan Distributor – NFI Co., Ltd.
Invicti is a global application security leader formed by combining two world-renowned security powerhouses: Netsparker (celebrated for its industry-leading technology) and Acunetix (recognized for its broad market adoption). Focused on addressing the growing risks associated with Web and API attack surfaces, Invicti is an industry pioneer in automated web security and Dynamic Application Security Testing (DAST).
Invicti is trusted globally by cybersecurity experts, SMBs, and large enterprises. It remains the preferred choice for government entities, defense sectors, educational institutions, telecommunications providers, banks, financial institutions, and e-commerce leaders—including the U.S. Department of Defense and Fortune 500 companies such as Nike, Disney, and Adobe.
In Taiwan, NFI Co., Ltd. (新永資訊有限公司) serves as the official authorized distributor, providing localized product consulting, technical support, and licensing services.
System Requirements
Minimum System Requirement
- - Supported Operating systems
- Microsoft Windows 2016 R2 and later、Windows 11、10
- Ubuntu Desktop/Server 18.0.4 LTS or higher
- Suse Linux Enterprise Server 15
- Kali Linux versions 2019.1 and later
- CentOS 8 and CentOS Stream Server and Workstation (with SELinux disabled)
- RedHat 8 and 9 (with SELinux disabled)
- Oracle Linux 8 (with SELinux disabled)
- *We are actively testing other Linux distributions.
- Please let us know if you have requests for specific distros.
- - CPU： 64 bit 2 core CPU processor
- - System memory： minimum of 4 GB RAM
- - Storage： 50 GB of available hard-disk space.
*This does not include the storage required to save the scan results, which will depend on the level of usage of Acunetix. - - Supported Browsers: Firefox、Chrome、Edge、Safari.
Invicti - Web + API
- Industry-Leading DAST + IAST and Proof-Based Scanning™ Validation Technology
Invicti's core Dynamic Application Security Testing technology eliminates the need to waste time manually filtering false positives. Once Invicti discovers a vulnerability, it automatically simulates an attacker to verify whether the vulnerability can actually be exploited.
• Automated Proof-of-Exploit Validation: Automatically performs safe, read-only proof-of-exploit validation on suspected vulnerabilities to confirm whether they are truly exploitable, delivering accuracy of up to 99.98%.
• Near-Zero False Positives and No Manual Triage: Eliminates the time required for manual false-positive verification, allowing development and security teams to immediately focus on remediating genuine high-risk threats.
• Modern Web and AI-Assisted Crawling: Fully supports HTML5, Single Page Applications (SPAs) such as React, Angular, and Vue, as well as complex authentication mechanisms including OAuth2, JWT, and SSO. AI-assisted navigation also helps analyze complex business logic and CAPTCHA workflows.
• Interactive Application Security Testing (IAST): Integrates with an IAST Agent to gain deeper visibility into application runtime behavior, accurately identifying the exact source-code lines and SQL queries associated with vulnerabilities to accelerate diagnosis.
- Comprehensive API Security Testing
As microservices and cloud architectures become increasingly widespread, APIs have become a major target for attackers. Invicti Web + API provides in-depth and proactive API security protection.
• Support for Mainstream Protocols and Standards: Covers RESTful, GraphQL, SOAP/WSDL architectures and supports direct import of OpenAPI (Swagger) specifications and Postman Collections.
• Multi-Layer Automated API Discovery: Automatically discovers unmanaged Shadow APIs and deprecated Zombie APIs to eliminate security blind spots.
• Dedicated OWASP API Top 10 Coverage: Performs in-depth detection of logical vulnerabilities such as BOLA/IDOR (Broken Object Level Authorization), BFLA, unauthorized access, and excessive exposure of sensitive data.
- Continuous Asset Discovery
You cannot protect assets you do not know exist. Invicti's continuous discovery service proactively identifies and maintains an inventory of your organization's Web and API assets.
• Discover Forgotten Assets: Automatically detects forgotten subdomains, test sites, externally exposed services, and inactive applications.
• Visualized Asset Management: Provides a centralized dashboard for real-time visibility into the security posture of all externally exposed Web and API assets, with the ability to add them to scheduled scans with a single click.
- AI-Assisted Automated Vulnerability Prioritization
Provides code-level remediation guidance and uses AI technology to automatically filter alert noise, helping developers accelerate vulnerability remediation.
• AI Vulnerability Risk Analysis: Uses AI to analyze vulnerability Reachability, Exploitability, and business impact, presenting only vulnerabilities that represent genuine and meaningful risks.
- Predictive Risk Scoring
Uses extensive historical data and AI-powered analysis to assign risk ratings and priorities to your Web applications and APIs.
• Priority-Based Remediation: Helps security teams identify which vulnerabilities or applications present the highest risk, allowing resources to be focused on the most urgent threats first.
- Seamless DevSecOps Integration
Shift security testing left by detecting vulnerabilities during the development and testing stages.
• Bidirectional CI/CD and Ticketing Integration: Natively supports mainstream tools including Jira, GitHub, Jenkins, Azure DevOps, GitLab, and ServiceNow.
• Automated Workflows: Automatically creates tickets for developers when validated vulnerabilities are discovered. After remediation, a Retest can be triggered automatically without manual intervention.
- Compliance Reports
Includes report templates for multiple international cybersecurity standards, enabling one-click report generation to simplify audits and customer compliance requirements.
• Supported Standards: PCI DSS, OWASP Top 10, OWASP API Top 10, HIPAA, ISO 27001, GDPR, CWE/SANS, and more.
Why Choose Invicti Web + API?
• Exceptional Accuracy: Proprietary Proof-Based Scanning™ technology significantly reduces false positives, saving teams hundreds of hours of manual verification.
• High Scalability: Whether protecting a single website or an enterprise environment with thousands of applications and APIs, Invicti can be flexibly deployed and centrally managed.
• Unified Platform Coverage: Breaks down the information silos between Web scanning and API scanning, enabling centralized visibility and control over security risks across modern applications and runtime environments.
About Invicti and Its Taiwan Distributor - NFI CO., LTD.
Invicti is a major application security provider formed by combining two internationally recognized brands: Netsparker, known for its advanced technology, and Acunetix, known for its broad market adoption. Invicti focuses primarily on the growing security risks targeting Web applications and APIs and is also a pioneer and industry leader in automated Web security technology and Dynamic Application Security Testing (DAST).Invicti products are trusted by cybersecurity professionals, small and medium-sized businesses, and large organizations worldwide. They are widely used across government, military, education, telecommunications, banking, finance, and e-commerce sectors, with customers including the Pentagon and Fortune 500 companies such as Nike, Disney, and Adobe.
Invicti's professional distributor in Taiwan is NFI CO., LTD., providing localized product consultation, technical support, and licensing services.
Kaspersky 卡巴斯基 防毒防駭軟體
全球的網路使用者因為卡巴斯基提供其所期望的偵測能力, 迅速的病毒分析時效以及高品質的服務而選用卡巴斯基實驗室防毒, 防駭客, 防垃圾郵件以及防間諜軟體產品. 我們提供針對 Windows, Linux, Novell 以及對於所有常見的郵件系統的防護. 我們的得獎產品是已經獲得 ISCA 和 West Coast Labs 的認證 .
Dr.Web v12 大蜘蛛防毒軟體
Dr.Web能於受感染的系統上運作，加上出色的防毒能力，使其成為優越的防毒軟體之一。 Dr.Web 具有業界最高的殺毒及修復成功率。 獨特的記憶體掃描技術及優越的修復能力，使Dr.Web可安裝於受感染的系統上。
Traffic IQ Professional
Traffic IQ 是一種高度可配置的解決方案，用於評估、審計和增強基於網絡的入侵檢測和防禦系統的識別和響應能力。 Traffic IQ Professional 可用於評估、審計和測試任何非代理包過濾設備的行為特徵，包括： • 應用層防火牆 • 入侵檢測系統 • 入侵防禦系統 • 路由器和交換機