getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Invicti vs Nessus Comparison (2026)

Add to Compare

Compare similar apps

CyLock EVA logo

CyLock EVA

4.9

Orca Security logo

Orca Security

4.8

Good recommendations?

Invicti logo

Invicti

Nessus logo

Nessus

Overview

Invicti is a web application and API security platform that provides proof-based vulnerability scanning with DAST, SAST, and ASPM capabilities. The platform discovers and tests websites, applications, and APIs while correlating security findings from multiple tools to prioritize real vulnerabilities. It integrates with CI/CD pipelines and offers AI-powered remediation guidance to help development teams address security issues efficiently.

Nessus is a cloud-based vulnerability assessment solution designed to help security practitioners identity and resolve vulnerabilities to protect organizations against various security risks. It comes with pre-defined templates which can be customized by users to scan for critical vulnerabilities.

  • Platforms supported
  • Web-based
  • iPhone app
  • Android app
  • Windows Phone app
  • Typical customers
  • Freelancers
  • Small businesses
  • Mid size businesses
  • Large enterprises
  • Customer support
  • Phone
  • Online
  • Knowledge base
  • Video tutorials
  • Platforms supported
  • Web-based
  • iPhone app
  • Android app
  • Windows Phone app
  • Typical customers
  • Freelancers
  • Small businesses
  • Mid size businesses
  • Large enterprises
  • Customer support
  • Phone
  • Online
  • Knowledge base
  • Video tutorials

Video & Screenshots

Pricing

Starting from

Empty state illustration for "No pricing info"

No pricing info

  • Free trial available
  • Credit cardless trial
  • Free account
  • Subscription based

Starting from

4000.2

One-time payment

  • Free trial available
  • Credit cardless trial
  • Free account
  • Subscription based

User reviews

4.7

26

5

4

3

2

1

19

5

2

0

0

  • Value for money
  • Ease of use
  • Features
  • Customer support
81%
would recommend this app

4.7

94

5

4

3

2

1

66

26

2

0

0

  • Value for money
  • Ease of use
  • Features
  • Customer support
92%
would recommend this app

Pros

“Overall, my experience with Invicti was very positive: it made vulnerability management much more straightforward and efficient. Once everything was set up, it provided consistent, actionable results that helped improve security with less manual overhead thus offering a great value for the money.”
AD

Aurel-Dragoș H.

Cyber Security

“The fact that Invicti integrates with Mend is another huge win for us because we use Mend for our SAST and SCA scans.”
TS

Taylor S.

Security Engineer

“I have been very satisfied with the capabilities of the tool and how well it integrates with our current setup, including our setup with Mend.”
TS

Taylor S.

Security Engineer

Pros

“Accuracy of scans are good and detects most vulnerabilities like SQL injection, XSS, and other misconfigurations.”
KR

Kiran R.

Vulnerability Assessor

“Automated scans are very friendly to setup and compares scope to OWASP top 10 vulnerabilities.”
KR

Kiran R.

Vulnerability Assessor

“Sometimes there are limitations in the scan exclusions.”
AK

Alex K.

Systems Engineer

Cons

“The cost of the product is prohibitive for smaller organizations.”
rg

ryan g.

Sr. Information Security Analyst

Cons

“performance is pretty poor, licensing experience is poor, does not normalize scope data, does not always show its work in scan output, lots of typos in finding text, filtering does not work as well as one would hope”
JB

Jeremy B.

Offensive Security Consultant

“Solid product, minus reporting. But massively overpriced and undermaintained.”
JB

Jeremy B.

Offensive Security Consultant

“Sometimes the vulnerability scan is a little too picky.”
MW

Matthew W.

AM

  • Vendor responds to reviews
  • Last reviewa year ago
  • Vendor responds to reviews
  • Last review2 months ago

Key features

  • Total features49
  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Activity Monitoring
  • Activity Tracking
  • Alerts/Notifications
  • Anomaly/Malware Detection
  • Application Security
  • Assessment Management
  • Asset Discovery
  • Asset Tagging
  • Audit Management
  • Audit Trail
  • Authentication
  • Collaboration Tools
  • Compliance Management
  • Compliance Tracking
  • Dashboard
  • Data Security
  • Endpoint Protection
  • Firewalls
  • IOC Verification
  • Issue Tracking
  • Log Management
  • Maintenance Scheduling
  • Monitoring
  • Network Scanning
  • Network Security
  • Password Protection
  • Patch Management
  • Penetration Testing
  • Policy Management
  • Prioritization
  • Real-Time Analytics
  • Real-Time Data
  • Real-Time Monitoring
  • Real-Time Reporting
  • Reporting & Statistics
  • Reporting/Analytics
  • Risk Analysis
  • Risk Assessment
  • Risk Management
  • Runtime Container Security
  • SQL Injections
  • SSL Security
  • Status Tracking
  • Third-Party Integrations
  • Threat Intelligence
  • Threat Protection
  • Threat Response
  • User Management
  • Vulnerability Assessment
  • Vulnerability Management
  • Vulnerability Protection
  • Vulnerability Scanning
  • Vulnerability/Threat Prioritization
  • Web Scanning
  • Web-Application Security
  • Website Crawling
  • Total features35
  • API
  • Access Controls/Permissions
  • Activity Dashboard
  • Activity Monitoring
  • Activity Tracking
  • Alerts/Notifications
  • Anomaly/Malware Detection
  • Application Security
  • Assessment Management
  • Asset Discovery
  • Asset Tagging
  • Audit Management
  • Audit Trail
  • Authentication
  • Collaboration Tools
  • Compliance Management
  • Compliance Tracking
  • Dashboard
  • Data Security
  • Endpoint Protection
  • Firewalls
  • IOC Verification
  • Issue Tracking
  • Log Management
  • Maintenance Scheduling
  • Monitoring
  • Network Scanning
  • Network Security
  • Password Protection
  • Patch Management
  • Penetration Testing
  • Policy Management
  • Prioritization
  • Real-Time Analytics
  • Real-Time Data
  • Real-Time Monitoring
  • Real-Time Reporting
  • Reporting & Statistics
  • Reporting/Analytics
  • Risk Analysis
  • Risk Assessment
  • Risk Management
  • Runtime Container Security
  • SQL Injections
  • SSL Security
  • Status Tracking
  • Third-Party Integrations
  • Threat Intelligence
  • Threat Protection
  • Threat Response
  • User Management
  • Vulnerability Assessment
  • Vulnerability Management
  • Vulnerability Protection
  • Vulnerability Scanning
  • Vulnerability/Threat Prioritization
  • Web Scanning
  • Web-Application Security
  • Website Crawling

Integrations

  • Total integrations29
  • Asana
  • BambooHR
  • Bitbucket
  • Bugzilla
  • CircleCI
  • Cloudflare
  • FogBugz
  • Freshservice
  • GitHub
  • GitLab
  • HashiCorp Consul
  • Jenkins
  • Jira
  • Mattermost
  • Microsoft Entra ID
  • Microsoft Teams
  • Okta
  • PagerDuty
  • PingFederate
  • Pivotal Tracker
  • Redmine
  • ServiceNow
  • Shortcut
  • Slack
  • TeamCity
  • Travis CI
  • Trello
  • YouTrack
  • Zapier
  • Total integrationsN/A
  • Asana
  • BambooHR
  • Bitbucket
  • Bugzilla
  • CircleCI
  • Cloudflare
  • FogBugz
  • Freshservice
  • GitHub
  • GitLab
  • HashiCorp Consul
  • Jenkins
  • Jira
  • Mattermost
  • Microsoft Entra ID
  • Microsoft Teams
  • Okta
  • PagerDuty
  • PingFederate
  • Pivotal Tracker
  • Redmine
  • ServiceNow
  • Shortcut
  • Slack
  • TeamCity
  • Travis CI
  • Trello
  • YouTrack
  • Zapier