Invicti

Avantages

While being easy to operate, it is flexible; offering diverse functions in vulnerability assessment from detecting basic vulnerabilities like out-of-date app versions to generating executive style reports of scan results.

Inconvénients

It gets quite slow when testing for some vulnerabilities in larger URLs.

Avantages

I like Netsparker because is very easy to use, but at the same time has a lot of options that allow an expert user to customize the level of scanning. Also make authenticated scan is very easy (several options are available). Report templates are different and cover all your needs.

Inconvénients

When do concurrent scans it consumes a lot of resources.

Alternatives envisagées 

Pourquoi choisir Invicti 

Pourquoi passer à Invicti

Avantages

Netsparker comes with an automation API so it is possible to include it as part of a Continuous Integration / Continuous Deployment (CI/CD) system. It usually works but not always.

Inconvénients

There is almost no documentation about how to use the product. You are expected to open a support ticket and ask how to do some of simplest things and it usually take a day to get a response back from support. Often the response is, "We don't support that", or "We don't have a sample that does that". I one time asked for .Net Framework sample code to pull a report from Netsparker and the answer I got was "Go toe the GUI and select these buttons. The report will download." The problem was I needed to download the reports problematically. Other times I asked for .Net samples and was given Python code. They are the same, correct?

Avantages

Netsparker is pretty intuitive. It simulates a lot of different attacks and vulnerabilities and present the result in a variety of different reports.

Inconvénients

It's somewhat expensive, at least if you want the enterprise version. It's not yet possible to ignore specific findings in later scans by marking them as false positives.

Avantages

UI is top-notch and easy to grok. It's highly efficient and customizable tool provide in depth reporting when you need it most. Support team is A+! Being able to generate multiple types of reports based on customer needs is quite useful.

Inconvénients

Docs were a bit outdated or not easy to follow when we initially started using the product. Support has steadily been improving them and they look great now.

Avantages

The software is very easy to use yet has extreme amount of customization for scanning any web application.

Inconvénients

Without an intimate knowledge of the capability of the tool, you may miss out on truly reaping its benefits in deep scanning of web applications.

Avantages

It is able to scan dynamic single page apps without hours of brittle scripting. The issues it finds are described fully with a clear indication of certainty. Reporting is flexible.

Inconvénients

They are not a well known vendor so we have to explain why we use Netsparker vs some of the better known vendors

Avantages

This tool has both web and desktop versions, with some licensing limitations. It scans your website, for issues and reports the issues and ways to fix them, online can leave it to run from cloud and do your work.

Their pricing is not that high.

Inconvénients

The desktop version when run on your system, it slows down everything in your system, so better to use the cloud base one. But these two versions have some difference i think. But overall we were happier with the package, but later as we did not need much, we did not renew it further.

Avantages

We use Netsparker for scanning our customers applications. Ease of use and Flexibility gives us freedom to use it wisely and help is completing our projects in timely manner.

Inconvénients

Credential scanning and captcha configuration difficulties.

Avantages

Its accurate findings and overall testing procedures. It enumerates more than other tools do with additional options to boot.

Inconvénients

Lack of CSV reporting. I wish I could get the same exact reporting features the Detailed HTML reporting templates do but into a CSV format for easy integration with our own custom reporting templates.

I also wish it did more reporting on Serialization attacks. Many web apps are extremely vulnerable to serialization attacks yet Netsparker does not escalate the vulnerability enough (unencrypted viewstate, unsigned viewstate, etc).

Avantages

Netsparker is easy to use, easy to configure, and you can be up and running your first scan in a matter of minutes. The scan results offer details on how to remediate the findings as well as what they did to find and validate the finding.

Inconvénients

One main issues. I would like to be able to change a domain. If I have a license for two domains, I should be able to rotate them. If server1.com goes EoL and server2.com has taken its place, I have to buy another subscription. Not cool.

Avantages

Netsparker helps harden my application by closing out vulnerabilities. We follow an agile development cycle, which includes performing frequent deployments. In the past, we have accidentally deployed vulnerable code, which was quickly fixed once Netsparker has flagged it.

Inconvénients

Would be nice if the security scanner were to include scans to help harden the server and OS, but this seems to be strictly a web application scanner. I have to use a second product to scan the OS.

Avantages

it is a easy of use product. It does not use excessive computer resource so you can install it on a laptop. It can give you a detailed vulnerability report.

Inconvénients

You have to define target system features but it should discover the target system and it should adapt itself.

Avantages

Excellent and Easy in terms of Automated Security Scanning and less false positives.

Inconvénients

Nothing I can say as Netsparker has been very helpful to our organization in identifying and fixing security vulnerabilities.

Avantages

Any issues that we contact Netsparker Support on are answered very quickly with detailed information that helps us decide what to do.

Inconvénients

There are issues that we end up labeling as False Positive, so that is disappointing. However, it doesn't change my opinion of the product.

Avantages

Easy to setup and get started. Offers on-prem capability linked to the cloud for scanning behind a firewall.

Inconvénients

They moved away from being able to offer "packs" of scans where we could easily scan short lived sites. They only offer a subscription model intended for recurring scans.

Avantages

The reports are well laid out and very comprehensive. One of the best things of the reports are the remediations it provides. The remediations give a lot of detail besides guiding you to a repair.

Inconvénients

Sometimes the scans have to be customized due to the size of the application and I had to submit the scan to a Netsparker Engineer for customization.

Avantages

A simple security scanner that scans your computer for threats and possible problems with your PC security and how to fix it. Easy to download and install, not complex at all. I completed a scan under 20 minutes and was easily able to fix any issue within minutes.

Inconvénients

Nothing, straight to the point it is a standard security scanner that finds any and all issues