Invicti Security

Invicti Security, founded in 2018 and headquartered in Austin, Texas, builds an application security platform for continuously scanning and securing web applications and APIs. The company was formed by combining two web application security pioneers, Netsparker and Acunetix, and reports more than 15 years of experience as an AppSec provider. Its customers span 117 countries and range from small businesses to global enterprises, including NASA, KPMG, Cisco and the United Nations.

The Invicti Application Security Platform integrates dynamic application security testing (DAST), static application security testing (SAST), software composition analysis (SCA), API security, container security and Application Security Posture Management (ASPM). A central element is proof-based scanning, which automatically confirms the exploitability of discovered vulnerabilities rather than merely flagging them; the company claims 99.98% accuracy for this technique. The stated purpose is to eliminate the false positives that burden conventional security tooling and to help teams prioritise remediation across large application estates, potentially numbering thousands of applications.

More recently the company has added AI-powered capabilities, including agentic pentesting and predictive risk scoring, intended to extend scanning coverage and speed up, and focus, remediation work. The platform is used by more than 3,600 organisations. Technical work at the company spans web application security, API security, container security, vulnerability validation and the machine-learning systems underlying its predictive and agentic features.