Title search:
⭠ Scroll left and right ⭢
- Invicti - Web + API Vulnerability Scanning Platform
-
categoryInformation Security Software
-
introduceInvicti (integrating the technologies formerly known as Acunetix and Netsparker) is a leading global application security platform designed to help enterprises automate and scale AppSec (Application Security). Invicti Web + API is an integrated platform that combines Dynamic Application Security Testing (DAST) with API security. Powered by its proprietary Proof-Based Scanning™ vulnerability validation technology and AI-assisted analysis, the platform can automatically inventory web and API attack surfaces from a single management interface, accurately validate exploitab
Invicti - Web + API
- Industry-Leading DAST + IAST with Proof-Based Scanning™
Powered by Invicti’s core Dynamic Application Security Testing technology, you no longer need to waste time manually verifying false positives. Once a vulnerability is detected, Invicti automatically simulates a real-world attack to confirm its exploitability.
• Proof-of-Exploit Verification: Automatically triggers safe, read-only proof-of-concept exploits on suspected vulnerabilities to confirm real-world exploitability, delivering up to 99.98% accuracy.
• Zero False Positives & No Manual Triage: Eliminates manual false-positive verification, allowing security and development teams to immediately focus on remediating genuine, high-risk threats.
• Modern Web & AI-Guided Scanning: Fully supports HTML5, Single Page Applications (SPAs such as React, Angular, and Vue), and complex authentication mechanisms (OAuth2, JWT, SSO). Leverages AI to seamlessly navigate business logic and bypass CAPTCHAs.
• Interactive Application Security Testing (IAST): Uses embedded IAST agents deep within the application runtime to pinpoint vulnerabilities down to the exact line of code and SQL query, accelerating diagnosis.
- Comprehensive API Security
As microservices and cloud architectures expand, APIs have become a primary attack surface. Invicti Web + API delivers deep, proactive API defense.
• Broad Protocol & Specification Support: Covers RESTful, GraphQL, and SOAP/WSDL architectures, with direct ingestion of OpenAPI (Swagger) specifications and Postman Collections.
• Multi-Layer Automated API Discovery: Automatically uncovers unmanaged Shadow APIs and abandoned Zombie APIs, completely eliminating security blind spots.
• Dedicated OWASP API Top 10 Coverage: Deeply tests for critical logic vulnerabilities, including BOLA/IDOR (Broken Object Level Authorization), BFLA, unauthorized access, and excessive data exposure.
- Continuous Asset Discovery
You cannot secure what you do not know exists. Invicti’s continuous discovery engine proactively identifies and tracks all web and API assets across your organization.
Automate regular scans – so you can be confident you’ll catch new vulnerabilities quickly.
• Uncover Forgotten Assets: Automatically discovers forgotten subdomains, staging/test environments, public-facing services, and idle applications.
• Visual Asset Management: Delivers a unified dashboard that provides real-time visibility into the security posture of all external web and API assets, allowing you to onboard them into scheduled scans with a single click.
- AI-Assisted Automated Vulnerability Prioritization
Provides code-level remediation guidance and leverages AI to filter out alert noise, helping developers remediate flaws faster.
• AI-Driven Risk Analysis: Analyzes vulnerability reachability, exploitability, and business impact to present an actionable list focused strictly on real, impactful risks.
- Predictive Risk Scoring
Leverages extensive historical data and AI analytics to grade and prioritize risk profiles across all web applications and APIs.
• Actionable Prioritization: Helps security teams identify high-risk applications and severe vulnerabilities first, ensuring resources are concentrated on the most pressing threats.
- Seamless DevSecOps Integration
Shifts security testing left, identifying vulnerabilities early during the development and testing phases.
• Bi-Directional CI/CD & Ticketing Integration: Offers native integrations with leading enterprise platforms, including Jira, GitHub, Jenkins, Azure DevOps, GitLab, and ServiceNow.
• Automated Workflows: Automatically logs tickets for verified vulnerabilities directly to developers. Once fixed, re-testing is automatically triggered with zero human intervention required.
- Compliance Reporting
Includes built-in report templates for major international security standards, generated with one click for effortless audits and vendor security assessments.
• Supported Frameworks: PCI DSS, OWASP Top 10, OWASP API Top 10, HIPAA, ISO 27001, GDPR, CWE/SANS, and more.
Why Choose Invicti Web + API?
• Unmatched Accuracy: Drastically reduces false positives using patented Proof-Based Scanning™, saving teams hundreds of hours in manual verification.
• High Scalability: Effortlessly scales and provides centralized management, whether securing a single web application or managing thousands across a global enterprise.
• Unified Single Platform: Breaks down silos between web and API scanning, delivering total visibility and control over modern applications and runtime security risks from a single pane of glass.
About Invicti & Official Taiwan Distributor – NFI Co., Ltd.
Invicti is a global application security leader formed by combining two world-renowned security powerhouses: Netsparker (celebrated for its industry-leading technology) and Acunetix (recognized for its broad market adoption). Focused on addressing the growing risks associated with Web and API attack surfaces, Invicti is an industry pioneer in automated web security and Dynamic Application Security Testing (DAST).
Invicti is trusted globally by cybersecurity experts, SMBs, and large enterprises. It remains the preferred choice for government entities, defense sectors, educational institutions, telecommunications providers, banks, financial institutions, and e-commerce leaders—including the U.S. Department of Defense and Fortune 500 companies such as Nike, Disney, and Adobe.
In Taiwan, NFI Co., Ltd. (新永資訊有限公司) serves as the official authorized distributor, providing localized product consulting, technical support, and licensing services.
System Requirements
Minimum System Requirement
- - Supported Operating systems
- Microsoft Windows 2016 R2 and later、Windows 11、10
- Ubuntu Desktop/Server 18.0.4 LTS or higher
- Suse Linux Enterprise Server 15
- Kali Linux versions 2019.1 and later
- CentOS 8 and CentOS Stream Server and Workstation (with SELinux disabled)
- RedHat 8 and 9 (with SELinux disabled)
- Oracle Linux 8 (with SELinux disabled)
- *We are actively testing other Linux distributions.
- Please let us know if you have requests for specific distros.
- - CPU： 64 bit 2 core CPU processor
- - System memory： minimum of 4 GB RAM
- - Storage： 50 GB of available hard-disk space.
*This does not include the storage required to save the scan results, which will depend on the level of usage of Acunetix. - - Supported Browsers: Firefox、Chrome、Edge、Safari.
Invicti - Web + API
- Industry-Leading DAST + IAST and Proof-Based Scanning™ Validation Technology
Invicti's core Dynamic Application Security Testing technology eliminates the need to waste time manually filtering false positives. Once Invicti discovers a vulnerability, it automatically simulates an attacker to verify whether the vulnerability can actually be exploited.
• Automated Proof-of-Exploit Validation: Automatically performs safe, read-only proof-of-exploit validation on suspected vulnerabilities to confirm whether they are truly exploitable, delivering accuracy of up to 99.98%.
• Near-Zero False Positives and No Manual Triage: Eliminates the time required for manual false-positive verification, allowing development and security teams to immediately focus on remediating genuine high-risk threats.
• Modern Web and AI-Assisted Crawling: Fully supports HTML5, Single Page Applications (SPAs) such as React, Angular, and Vue, as well as complex authentication mechanisms including OAuth2, JWT, and SSO. AI-assisted navigation also helps analyze complex business logic and CAPTCHA workflows.
• Interactive Application Security Testing (IAST): Integrates with an IAST Agent to gain deeper visibility into application runtime behavior, accurately identifying the exact source-code lines and SQL queries associated with vulnerabilities to accelerate diagnosis.
- Comprehensive API Security Testing
As microservices and cloud architectures become increasingly widespread, APIs have become a major target for attackers. Invicti Web + API provides in-depth and proactive API security protection.
• Support for Mainstream Protocols and Standards: Covers RESTful, GraphQL, SOAP/WSDL architectures and supports direct import of OpenAPI (Swagger) specifications and Postman Collections.
• Multi-Layer Automated API Discovery: Automatically discovers unmanaged Shadow APIs and deprecated Zombie APIs to eliminate security blind spots.
• Dedicated OWASP API Top 10 Coverage: Performs in-depth detection of logical vulnerabilities such as BOLA/IDOR (Broken Object Level Authorization), BFLA, unauthorized access, and excessive exposure of sensitive data.
- Continuous Asset Discovery
You cannot protect assets you do not know exist. Invicti's continuous discovery service proactively identifies and maintains an inventory of your organization's Web and API assets.
• Discover Forgotten Assets: Automatically detects forgotten subdomains, test sites, externally exposed services, and inactive applications.
• Visualized Asset Management: Provides a centralized dashboard for real-time visibility into the security posture of all externally exposed Web and API assets, with the ability to add them to scheduled scans with a single click.
- AI-Assisted Automated Vulnerability Prioritization
Provides code-level remediation guidance and uses AI technology to automatically filter alert noise, helping developers accelerate vulnerability remediation.
• AI Vulnerability Risk Analysis: Uses AI to analyze vulnerability Reachability, Exploitability, and business impact, presenting only vulnerabilities that represent genuine and meaningful risks.
- Predictive Risk Scoring
Uses extensive historical data and AI-powered analysis to assign risk ratings and priorities to your Web applications and APIs.
• Priority-Based Remediation: Helps security teams identify which vulnerabilities or applications present the highest risk, allowing resources to be focused on the most urgent threats first.
- Seamless DevSecOps Integration
Shift security testing left by detecting vulnerabilities during the development and testing stages.
• Bidirectional CI/CD and Ticketing Integration: Natively supports mainstream tools including Jira, GitHub, Jenkins, Azure DevOps, GitLab, and ServiceNow.
• Automated Workflows: Automatically creates tickets for developers when validated vulnerabilities are discovered. After remediation, a Retest can be triggered automatically without manual intervention.
- Compliance Reports
Includes report templates for multiple international cybersecurity standards, enabling one-click report generation to simplify audits and customer compliance requirements.
• Supported Standards: PCI DSS, OWASP Top 10, OWASP API Top 10, HIPAA, ISO 27001, GDPR, CWE/SANS, and more.
Why Choose Invicti Web + API?
• Exceptional Accuracy: Proprietary Proof-Based Scanning™ technology significantly reduces false positives, saving teams hundreds of hours of manual verification.
• High Scalability: Whether protecting a single website or an enterprise environment with thousands of applications and APIs, Invicti can be flexibly deployed and centrally managed.
• Unified Platform Coverage: Breaks down the information silos between Web scanning and API scanning, enabling centralized visibility and control over security risks across modern applications and runtime environments.
About Invicti and Its Taiwan Distributor - NFI CO., LTD.
Invicti is a major application security provider formed by combining two internationally recognized brands: Netsparker, known for its advanced technology, and Acunetix, known for its broad market adoption. Invicti focuses primarily on the growing security risks targeting Web applications and APIs and is also a pioneer and industry leader in automated Web security technology and Dynamic Application Security Testing (DAST).Invicti products are trusted by cybersecurity professionals, small and medium-sized businesses, and large organizations worldwide. They are widely used across government, military, education, telecommunications, banking, finance, and e-commerce sectors, with customers including the Pentagon and Fortune 500 companies such as Nike, Disney, and Adobe.
Invicti's professional distributor in Taiwan is NFI CO., LTD., providing localized product consultation, technical support, and licensing services.
趨勢科技 PC-cillin 2026 雲端版
PC-cillin 雲端版採用 XGen 多層式防禦技術，融合先進的 AI 人工智慧，為您預先防範各種以竊取個資金錢為目標的各種安全威脅，包含勒索病毒和網路詐騙等，全面守護您的上網裝置與個資安全。
EaseFilter 文件系統過濾器SDK
EaseFilter綜合文件安全SDK是一套文件系統過濾驅動軟體開發包，包括：文件監控過濾驅動、文件訪問控製過濾驅動、透明文件加密過濾驅動、進程過濾驅動和註冊表過濾驅動 。
Invicti - Acunetix Web Vulnerability Scanning
Acunetix is a powerful and intelligent web security scanning tool developed by Invicti. It automatically helps identify security vulnerabilities in websites, Web applications, and APIs. Equipped with industry-leading crawling and scanning engines, Acunetix can not only automatically build an inventory of web assets, but also detect common high-risk issues such as SQL Injection and Cross-Site Scripting (XSS),Acunetix leverages Invicti’s advanced technology and vulnerability database to verify whether detected vulnerabilities are genuinely exploitable, significantly reducing false positi