Blog

AppSec Blog

Web Security

PHP2Shell: Two critical PHP vulnerabilities require immediate patching

PHP2Shell: Two critical PHP vulnerabilities require immediate patching

Ending the “critical” label wars: Why proof should settle finding severity debates

Container security testing checklist: What to test from build to runtime

How do CISOs evaluate application security tools for large organizations?

SBOM compliance requirements: A comprehensive guide

IaC security checklist: Prevent cloud misconfigurations before deployment

HIPAA API security testing: A practical guide for healthcare AppSec teams

Human-in-the-loop vs fully autonomous pentesting: Finding the right balance

Security Research

Security Labs

Invicti Agentic Pentest uncovers four vulnerabilities in three open-source applications

Invicti Agentic Pentest benchmark on Fider and Photoview

Security research in the age of AI tools: Django and Node.js SQL injection analysis

When your AI chatbot does more than chat: The security of tool usage by LLMs

Behind the scenes: How Invicti built the security engine of the future

Next.js middleware authorization bypass vulnerability: Are you vulnerable?

First tokens: The Achilles’ heel of LLMs

Ducks, dinosaurs, and XSS: A little knowledge is a dangerous thing in security

Brainstorm tool release: Optimizing web fuzzing with local LLMs

System prompt exposure: How AI image generators may leak sensitive instructions

Cache bypass techniques for time-based SQL injection

Analyzing WordPress hack access logs with NotebookLM

News

News

Invicti named a Leader in 2026 IDC MarketScape for dynamic application security testing

Invicti DAST leads on coverage and accuracy in independent Miercom benchmark

Latio 2026 Application Security Market Report recognizes Invicti as a leader and innovator

Invicti Security Awarded Best Place to Work Again

Invicti Acquires Kondukto to Deliver Proof-Based Application Security Posture Management

Invicti launches next-gen Application Security Platform with AI-powered DAST

Invicti Security Appoints Kevin Gallagher as President

Invicti Expands App Security Platform with Comprehensive API Security

Invicti Launches First AI-Enabled Predictive Risk Scoring for Application Security Testing

Product Docs & FAQs

Product Docs & FAQs

January 2023 update for Invicti Enterprise on-premises

Invicti improves discovery service and integrations

October 2022 update for Invicti Enterprise on-premises

September 2022 update for Invicti Enterprise On-Demand

Incorporating business logic to get the best out of DAST

August 2022 update for Invicti Enterprise On-Demand

May 2022 update for Invicti Enterprise On-Premises

How Invicti can help with AppSec compliance

Invicti Enterprise achieves WCAG 2.1 accessibility compliance