Invicti launches Agentic Pentest to transform modern penetration testing. The first capability in Invicti's agentic offensive security offering, combining autonomous AI and proof-based DAST for fast, cost-effective, validated penetration tests Machine Learning & Artificial Intelligence AUSTIN, Texas, July 30, 2026 /PRNewswire/ - Invicti Security, a leader in web application and API security, today announced Invicti Agentic Pentest, a new approach to penetration testing that combines autonomous AI reasoning with Invicti's industry-leading proof-based Dynamic Application Security Testing (DAST). Built on more than 20 years of application security expertise, Invicti autonomously discovers, validates, and reports exploitable vulnerabilities, enabling organizations to conduct deeper security testing without the delays, costs, and scalability limitations of traditional manual penetration testing. Modern development teams release new code daily, while traditional penetration tests remain expensive, manual, and point-in-time. AI-only approaches improve automation but often incur significant compute costs by applying frontier models across every stage of testing. Invicti addresses both challenges by combining autonomous AI with proof-based DAST. "The future of application security isn't about using more AI. It's about using AI more intelligently," said Neil Roseman, CEO of Invicti Security. "Many emerging solutions rely on large AI models throughout the entire penetration testing process. We believe there's a better way. Hybrid agentic pentesting combines autonomous AI reasoning with Invicti's proven proof-based DAST technology, applying each where it delivers the greatest value. That architecture enables faster, more cost-effective penetration testing while maintaining the deterministic validation enterprise security teams require." Hybrid agentic pentesting: the right balance The hybrid approach combines the strengths of autonomous AI with deterministic security testing. Specialized AI agents reason about application behavior, identify attack paths, and adapt testing strategies in real time, while Invicti's proof-based DAST engine applies a vast library of fast, reliable deterministic heuristics that are blended into a single report. Rather than relying on frontier AI models for every stage of testing, Invicti uses autonomous reasoning selectively, while relying on Invicti's proven DAST engine for simpler, established vulnerabilities. This hybrid architecture delivers the depth of agentic AI testing faster, with lower total cost, and with high-confidence findings that developers can immediately reproduce and remediate. Engineering & Technology Discovering vulnerabilities traditional scanners miss Invicti Agentic Pentest implements a proprietary reconnaissance engine; it maps an application's attack surface, analyzes authentication flows, and builds a contextual understanding of application behavior before generating customized attack plans. When source code is available, Invicti incorporates code-level context to create tailored attack payloads while continuing to validate every confirmed finding from an external attacker's perspective. Then, Invicti orchestrates specialized AI agents that operate in parallel across multiple vulnerability classes, including SQL injection, remote code execution, cross-site scripting, server-side request forgery, XML external entity injection, insecure deserialization, path traversal, NoSQL injection, and other attack techniques. An app-specific agent then synthesizes reconnaissance and assessment findings into a holistic attack strategy that mirrors experienced pentesters, including multi-stage attacks. During early-access deployments, Invicti Agentic Pentest identified complex attack paths and business logic vulnerabilities that traditional automated scanning alone would not have uncovered. By reasoning over proof-based DAST findings and adapting its testing strategy in real time, Invicti uncovered exploitable conditions while validating every reported vulnerability with concrete evidence. "We were impressed by what Invicti uncovered beyond traditional scanning. It connected findings, reasoned through the application, and identified attack paths our existing tools hadn't exposed. More importantly, their finds came with evidence our team quickly validated and fixed." Security leader at SaaS technology company and participant in Invicti's Early Access Program Business Operations Built for enterprise application security teams Invicti Agentic Pentest integrates with existing application security workflows, enabling organizations to replace or augment manual penetration testing with autonomous assessments that fit naturally into modern software development. Each assessment includes: * Autonomous reconnaissance and adaptive attack planning * Specialized AI agents targeting distinct vulnerability classes * Validated findings with proof of exploitability * Human-readable penetration testing reports with executive and technical summaries * Detailed reproduction steps, payloads, and remediation guidance * Enterprise controls including scope enforcement, rate limiting, role-based access, and isolated execution environments As the first capability released under Invicti's agentic offensive security approach, Agentic Pentest helps organizations accelerate remediation, reduce manual testing costs, expand security coverage, and validate the security of rapidly changing web and API applications. By combining intelligent exploration with deterministic validation, organizations gain faster assessments and a more efficient path to enterprise-scale penetration testing than approaches that rely exclusively on frontier AI models. Availability Agentic Pentest is part of the Invicti platform. Organizations can request a demonstration or learn more by visiting www.invicti.com/pentest. Machine Learning & Artificial Intelligence About Invicti Delivering the industry's most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation. Based in Austin, Texas, Invicti serves more than 4,000 organizations worldwide. To learn more, visit Invicti.com or follow HiTechNectar on LinkedIn. SOURCE Invicti Security HiTechNectar send you the latest trends and best practice tips for online customer engagement: Receive Updates: HiTechNectar hate spams too, you can unsubscribe at any time.

Nuaware announces strategic partnership with Invicti Security. June 25, 2026 London, UK - Nuaware (An Exclusive Networks Company), a leading value-added distributor specialising in cloud-native technologies and DevOps solutions, today announced a new strategic partnership with Invicti Security, a global leader in proof-based application security solutions for DevSecOps teams. This partnership brings together Nuaware's deep expertise in cloud, DevOps, and modern application delivery with Invicti's powerful application security testing platform, enabling organisations to identify and remediate vulnerabilities across their web applications and APIs with speed and accuracy. As organisations increasingly adopt cloud-native architectures and agile development practices, security remains a critical concern. The collaboration between Nuaware and Invicti aims to empower partners and customers across EMEA with integrated solutions that embed security into every stage of the software development lifecycle. Driving Secure Software Development Through this partnership, Nuaware will provide its partner ecosystem with access to Invicti's industry-leading solutions, including automated vulnerability scanning, proof-based dynamic scanning technology, and seamless integration into CI/CD pipelines. This enables organisations to: * Continuously identify and validate vulnerabilities in real time. * Reduce false positives with proof-based scanning. * Accelerate remediation through developer-friendly workflows. * Embed security seamlessly into DevOps processes. Empowering the Partner Ecosystem Nuaware's extensive partner network will benefit from new opportunities to expand their security portfolios, helping customers address growing compliance and risk management requirements without slowing innovation. "Application security is a critical priority for organisations navigating digital transformation," said Lee Driscoll, CEO at Nuaware. "By partnering with Invicti Security, we are equipping our partners with best-in-class tools to help their customers proactively secure applications while maintaining development velocity." "We're really pleased to be working with Nuaware as a trusted partner for Invicti Security in Germany. Together, we help bring strong AppSec to enterprise customers backed by fast, reliable support. We're excited about what we've already built and where we can take it from here." - Noel Slane, VP of Global Sales Meeting the Demands of Modern Application Security With cyber threats targeting web applications and APIs at an increasing rate, organisations need solutions that combine automation, accuracy, and scalability. Together, Nuaware and Invicti are committed to helping customers modernise their security approach and build more resilient applications. About Nuaware Nuaware, an Exclusive Networks company, is a specialist DevSecOps Cloud and Cloud native technologies distributor. They enable customers and business partners in their cloud native journeys by providing high-value services to build, secure and operate their technology stack. Their extensive knowledge of this highly technical market in conjunction with being an Exclusive Network Company - a global trusted cybersecurity specialist for digital infrastructure, gives them a global reach and ability to service customers in over 150 countries across 5 continents. For more information visit www.nuaware.com. About Invicti Delivering the industry's most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation. Based in Austin, Texas, Invicti serves more than 4,000 organizations worldwide. To learn more, visit www.invicti.com or follow Nuaware Ltd. on LinkedIn.

Invicti Security has launched AppSec Core, an all-in-one application security platform designed to help lean security teams identify and prioritise exploitable runtime risks throughout the software development lifecycle. The platform aims to cut through scanner noise and deliver unified visibility from code to cloud to runtime. AppSec Core integrates multiple security tools including proof-based DAST, SAST, software composition analysis, container security, infrastructure as code scanning, automated SBOM generation and secrets detection. The platform correlates DAST findings with SAST results to map runtime issues directly to code and developers. Available immediately as a cloud-hosted SaaS platform, AppSec Core features automated workflows and seamless CI/CD integrations. Invicti Security, based in Austin, Texas, serves over 4,000 organisations worldwide.