Security industry veteran brings deep experience in partner enablement AUSTIN, Texas, Feb. 25, 2021 — Invicti Security™, a leader in Dynamic Application Security Testing (DAST) and Interactive Application Security Testing (IAST) today announced John Andrews has joined the leadership team as Vice President of Global…
New VP of Global Channel for Invicti Security
Invicti Security is very excited to have John Andrews join us as the Vice President of Global Channel for Invicti and Netsparker. John joined Invicti in February and brings his 20+ years of experience building growth relationships with a variety of partner types, including distribution,…
WAF security – getting the most out of your web application firewall
Web application firewalls (WAFs) are one of many web application security solutions at your disposal. Unfortunately, buyers often don’t understand their purpose and treat them as a direct replacement for other classes of tools, for example, web vulnerability scanners such as Invicti. The two classes…
Vulnerability scanning tools – why not open-source?
With the immense popularity of open-source software such as Linux, WordPress, or Magento, you might wonder why the situation is so different in the world of web application security. Let’s try to compare open-source vulnerability scanners with commercial solutions and it will soon be clear…
The Invicti REST API
In addition to the user-friendly Invicti user interface, all Invicti functionality is also available through a built-in REST API. The REST API is available immediately upon installation and requires no configuration at all. All you need to do is open the Invicti GUI to get…
Invicti update introduces Node.js AcuSensor, target knowledge base, and multiple unrestricted access vulnerability checks
A new Invicti update has been released for Windows, Linux, and macOS: 13.0.210129162. This Invicti update introduces AcuSensor for Node.js and a feature called target knowledge base, which holds data from past scans and helps improve future scans. We also made fully qualified domain names…
Managing scans using Python and the Invicti API
In the two previous installments of this series, we have shown you how to manage Invicti scans using Bash and PowerShell together with the Invicti API. In this article, you will learn how to do the same using Python. As an example, we will create…
Web API security with Invicti
It’s no secret – application programming interfaces are everywhere. Many complex web applications are based on microservices, which use APIs to work with one another. Mobile apps and IoT devices also use APIs to communicate with their back-ends. Not to mention that almost every online…
Scanning authenticated web assets with the Login Sequence Recorder
Most web applications and websites require some form of authentication – either as a whole or in an area. Many web vulnerability scanners struggle with such authenticated web assets. While some scanners are able to detect standard authentication forms and mechanisms, in the case of…