Invicti is exhibiting at IP Expo Europe 2017

Come join us at Cyber Security Europe 2017 at the Excel London on the 4th and 5th October. Cyber Security Europe at IP EXPO Europe offers invaluable security insight for both IT managers and security specialists. Hear from the experts how you can build stronger defences…

Read more

Invicti introduce Multi-engine feature

The Invicti Multi-engine setup is suitable for Enterprise customers who need to scan more than 10 websites or web applications simultaneously. This can be achieved using multiple Invicti scanning engines by installing one Main Installation and multiple Scanning Engines, all managed from a central console….

Read more

New build checks for vulnerabilities in Apache Struts 2, Altassian Confluence, and introduces Multi-Engine feature

Invicti v11 (build 11.0.172351036) has been released. This new build includes new vulnerability checks in Apache Struts 2, Atlassian Confluence and moment.js. It improves on the database backup file detection, jquery version fingerprint and introduces the new Multi-engine feature. New Features and Vulnerability Tests Detection…

Read more

The difference between Vulnerability Assessment and Penetration Testing

Many information security professionals are familiar with the terms ”‘vulnerability assessment” and “penetration testing” (“pentest” for short). Unfortunately, in many cases, these two terms are incorrectly used interchangeably. This post aims to clarify differences between vulnerability assessment and penetration testing, demonstrate that both are integral…

Read more

What is Black-box Security Testing?

Black-box security testing refers to a method of software security testing in which the security controls, defences and design of an application are tested from the outside-in, with little or no prior knowledge of the application’s internal workings. Essentially, black-box testing takes an approach similar…

Read more

Using Client Certificates in Invicti

In most TLS handshakes, the client authenticates the server, therefore, the client knows that the server is who it says it is, but the server doesn’t know much about the client. In most cases, this is fine — authentication via credentials is enough in many…

Read more

Invicti featured at DotForce GDPR Meeting Milan, Italy

On 13th June 2017, Invicti Distributors for Italy – DotForce Srl, organised a partner event at the Chamber of Commerce (Camera di Commercio) in Milan, overlooking the magnificent Duomo. Over sixty of Italy’s best IT Security System Integrators and Managed Service Providers attended the DotForce…

Read more

Issue Tracker Integration with Invicti

An Issue Tracker such as Atlassian JIRA, GitHub and Microsoft TFS is a powerful and essential tool in the Software Development Life Cycle (SDLC) of almost any software project. It helps development teams streamline collaboration and manage their work without getting lost in an endless…

Read more