Imagine having the easiest-to-use security scanner on an easiest-to-use operating system – now it’s possible. Invicti is now available on macOS. You can harness the full power of Invicti using your operating system of choice, be it Windows, Linux, macOS, or the cloud. You can…
Step-By-Step Configuration with Jira
You can manage web vulnerabilities internally with Invicti. However, these vulnerabilities will need to be fixed by developers and the developers may already use an issue management system. Therefore, managing them internally might not be an optimal choice. In such a case, your vulnerability scanner…
Web System Hardening in 5 Easy Steps
To harden a computer system means to make it more difficult for a malicious hacker to attack. In formal terms, system hardening means reducing the attack surface – the attack surface is the combination of all the points where an attacker may strike. Many computer…
nginx Security: How To Harden Your Server Configuration
Currently, nginx is the most popular web server, recently beating Apache. It is lightweight, fast, robust, and supports all major operating systems. It is the web server of choice for Netflix, WordPress.com, and other high traffic sites. An nginx server can easily handle 10,000 inactive…
Tracking a Vulnerability from Detection to Resolution
Invicti is not just a web vulnerability scanner, it is a full vulnerability management solution. In this article, we want to show you the entire process of finding a vulnerability and then fixing it. You will see how features of Invicti make this process much…
Invicti update introduces support for GraphQL and OAuth 2.0, multiple UI updates, and a new comprehensive report
Invicti build 13.0.200624118 for Windows and Linux has been released. The new Invicti build introduces support for GraphQL and OAuth 2.0, allowing Invicti to scan web applications that make use of these web technologies. It also includes multiple UI updates, a new comprehensive and interactive…
Exploiting SSTI in Thymeleaf
One of the most comfortable ways to build web pages is by using server-side templates. Such templates let you create HTML pages that include special elements that you can fill and modify dynamically. They are easy to understand for designers and easy to maintain for…
Paul’s Security Weekly: New Web Technology & Impact on Automated Security Testing
Our core security researcher, Benjamin Daniel Mussler, has been invited to Paul’s Security Weekly podcast to participate in a discussion about new web technologies and their impact on automated security testing. Benjamin primarily talked about the fact that web browsers have gone a long way…
Invicti Releases Business Logic Recorder
New feature enables vulnerability scanning deeper into web applications AUSTIN, TEXAS – June 16, 2020 – Invicti, a global leader in automated web application security, has incorporated a brand new feature, the Business Logic Recorder (BLR), into the product. The Business Logic Recorder is a…