# Invicti

> Invicti sells application security software for discovering, testing and managing vulnerabilities in web applications and APIs. Its DAST heritage combines Netsparker and Acunetix, with proof-based validation at the core; Kondukto adds orchestration and application security posture management. The Austin-based company reports more than 5,000 customers worldwide.

- **Founded:** 2018
- **Headquarters:** Austin, United States
- **Founders:** Ferruh Mavituna (Founder and Strategic Advisor; former CEO)
- **Products:** Web + API, AppSec Core, AppSec Flex, Invicti ASPM, Agentic Pentest / Octo
- **Notable:** Reports 5,000+ customers and use in 115+ countries., Announced $625 million growth investment in 2021., Acquired Kondukto in August 2025.

## Products & services

- **Web + API** — DAST, API discovery and testing, proof-based validation and CI/CD automation.
- **AppSec Core** — Broader code, runtime and supply-chain coverage including SAST, SCA and ASPM.
- **AppSec Flex** — Enterprise platform package with additional integrations and deployment flexibility.
- **Invicti ASPM** — Kondukto-derived orchestration, correlation and vulnerability management.
- **Agentic Pentest / Octo** — Automated assessment of an application and its APIs; advertised at $500 maximum per pentest with delivery within 24 hours.
- **Acunetix** — Web vulnerability scanning product lineage brought together with Netsparker in 2018.
- **Professional services and support** — Implementation help, premium support and guided success options.

## Achievements

- Reports 5,000+ customers and use in 115+ countries.
- Announced $625 million growth investment in 2021.
- Acquired Kondukto in August 2025.
- Named a Leader in the September 2026 IDC MarketScape for worldwide DAST, according to its announcement.

## Latest updates

- **2026-09** — September 29 announcement reported placement in the Leaders Category of IDC’s worldwide DAST assessment.
- **2026-07** — Announced Agentic Pentest, combining autonomous AI reasoning with proof-based DAST; press release dated July 29 and posted July 30.
- **2026-01** — January 30 technical article clarified proof-based scanning as controlled exploitability validation for supported findings.
- **2025-08** — Kondukto acquisition added ASPM orchestration and correlation to Invicti’s DAST platform.

## Links

- Website: https://www.invicti.com/
- LinkedIn: https://www.linkedin.com/company/invicti-security
- Twitter/X: https://x.com/InvictiSecurity
- GitHub: https://github.com/Invicti-Security
- Facebook: https://facebook.com/Invicti-Security-100090617259790/

---

Profile page: https://yespress.io/invicti
Published by YesPress — https://yespress.io
Last updated: 2026-10-01