Back/Invicti

Invicti

Cybersecurity & Identity Management netsparker.com

Austin, Texas-based application security company founded in 2005. Private. Operates in web security, DAST, and vulnerability management. Serves enterprise DevSecOps teams with automated security testing tools.

Plans tracked

3 add-ons

Pricing changes

Latest Wk 36 '26

Pricing model

Subscription

No free tier

Pricing Change History

9 changes

20269 changes

Wk 36 '26

Packaging

New Agentic Pentest Plan: $500 Max Per Pentest

New 'Agentic Pentest' plan added for single-app/API-suite agentic pentesting, priced at $500 max per pentest with 24-hour delivery — the first concrete price shown on a page where every other plan is quote-only.

View diff

Wk 34 '26

Improvement

Invicti flags On-Premises deployment "coming soon" in Web + API plan

On-Premises deployment listed under the Web + API plan is now tagged '(coming soon)', signaling the option is no longer currently available in that tier.

View diff

Wk 32 '26

Packaging

Invicti: AppSec Flex tier drops "Coming soon" label

AppSec Flex plan's "(Coming soon)" label removed and description rewritten from "Bring your AST tools together on one AppSec platform" to "Deploy your way with flexible pricing that scales with your AppSec program", signaling the tier is now generally available

View diff

Wk 31 '26

Packaging

Invicti: support services moved from standalone section to per-plan add-ons

Removed the standalone 'Additional Security Services, Support, and Guidance' section (Agentic Penetration Testing, Premium Support & Guided Success, Professional Service Hours) and bundled equivalent services (Agentic Pentesting, Professional Services, Premium Support, Guided Success) as included bullets directly within the Web & API, AppSec Core, and AppSec Flex plan cards

View diff

Wk 30 '26

Packaging

Invicti drops "DAST" from Web & API plan name, keeps features intact

The 'Web & API DAST' plan card heading was shortened to 'Web & API', dropping the DAST suffix from the plan name. Underlying features and CTA are unchanged.

View diff

Q2 '26

Packaging

Invicti: new Web & API DAST tier and AppSec Flex added

Pricing page restructured: added a new entry-level 'Web & API DAST' tier and an 'AppSec Flex (Coming Soon)' tier

View diff

Wk 25 '26

Improvement

Invicti adds agentic pentesting, rewrites security plan features

Support and services section renamed from 'World Class Support Always' to 'Additional Security Services, Support, and Guidance'; offerings changed: US-Based Support and ProServ Hours replaced by Agentic Penetration Testing and Premium Support & Guided Success. Feature bullet lists across all three plan cards (Web & API DAST, AppSec Core, AppSec Flex) comprehensively reorganized; new items include Multilayer API Discovery, Stateful API Security, Proof-Based Scanning, Runtime Validation, Container Security, Pentest Import, CISO Posture Dashboard.

View diff

Wk 24 '26

Packaging

Invicti overhauls lineup with Web & API DAST, drops AppSec Enterprise

Pricing lineup restructured: AppSec Enterprise removed; new Web & API DAST standalone plan added and AppSec Flex (Coming Soon) introduced as enterprise-tier BYOA orchestration offering.

View diff

Wk 12 '26

Packaging

Invicti removes AI-Guided Fixes and ASPM-only pricing options.

Standalone ASPM-only pricing option discontinued AI-Guided Fixes feature removed from AppSec Enterprise plan

View diff