Senior Software Engineer - Agentic AI

Invicti named a Leader in 2026 IDC MarketScape for dynamic application security testing. September 29, 2026 Invicti was recognized for strengths in exploitability validation through proof-based scanning, AI-assisted business logic and abuse case testing without predefined scripts, and end-to-end API discovery and testing. AUSTIN, Texas - September 29, 2026 - Invicti Security, a leader in application security, today announced that it has been positioned in the Leaders Category in the IDC MarketScape: Worldwide Dynamic Application Security Testing 2026 Vendor Assessment (Doc #US54119126, September 2026). The IDC MarketScape evaluated 16 dynamic application security testing (DAST) vendors based on current capabilities and future strategy, drawing on detailed vendor surveys and briefings, publicly available information, and customer feedback. The assessment recognized Invicti for strengths in exploitability validation through proof-based scanning, AI-assisted business logic and abuse case testing without predefined scripts, and end-to-end API discovery and testing. The recognition comes as AI-assisted software development increases both the speed of delivery and the importance of testing applications in their running state for organizations. According to the report, "IDC research finds that 90% are piloting or have adopted AI coding tools and nearly three-quarters agree that these tools raise the risk that developers merge code they do not fully understand, even when scans pass (source: IDC's DevSecOps and Software Supply Chain Security Survey, July 2026). Further, this same survey found that 48% of organizations using AI coding tools reported either a moderate or a significant increase in security issues reaching production. As security issues increasingly reach production, DAST provides an essential backstop by testing applications as they run and exposing weaknesses and behaviors that may escape manual review and earlier-stage scanning." "DAST has always been about understanding what software actually does when it runs, and that runtime perspective is becoming even more important as AI changes how quickly software is created and shipped," said Neil Roseman, CEO of Invicti Security. "We believe being named a Leader in the IDC MarketScape validates both the strength of the DAST technology our customers rely on today and the direction we're taking it: bringing proven runtime intelligence together with application security testing during development and agentic pentesting so teams can find, validate, and prioritize the risks that matter." The IDC MarketScape highlights three Invicti strengths. Together, Invicti believe they show how Invicti combines validated vulnerability detection, AI-assisted testing, and API security to extend DAST across modern applications and development workflows: * Exploitability validation through proof-based scanning: Rather than reporting a candidate vulnerability, Invicti's engine executes a nondestructive follow-on payload to retrieve verifiable evidence, such as a database version or system output, and tags confirmed findings distinctly from unconfirmed ones. This feature provides teams with a basis for prioritizing remediation without routing every finding to a security team for manual confirmation. * AI-assisted business logic and abuse case testing without predefined scripts: AI-driven login agent handles authentication, and an AI-assisted form filler supplies contextually valid data, and stateful API scanning infers parameter relationships to catch workflow manipulation and business rule bypass, extending coverage beyond signature-based detection without scripted test cases. * End-to-end API discovery and testing: Invicti combines multilayer API discovery across scanning, source code, traffic, and eBPF analysis to build an API inventory. AI-enriched schemas add source code context to improve testing depth, while native CI/CD integration automates API security testing throughout the SDLC. According to the report, "Customers describe Invicti's output as trustworthy and largely free of false positives, requiring limited additional triage before a finding reaches a developer. They also cite the platform's configuration flexibility, such as the ability to scope scans to a specific technology stack, as a strength. They also value the vendor relationship itself, citing direct access to engineering staff, rather than sales contacts, and a responsive technical account team." "Application security teams continue to spend considerable time manually validating scanner findings before routing them to developers. Invicti addresses this problem through proof-based scanning, which is designed to confirm exploitability by executing a nondestructive follow-on payload and retrieving verifiable evidence," said Katie Norton, Research Director at IDC. 'The company's longer-term strategy builds on DAST as a foundation for continuous, validated runtime testing, and it reflects the market's movement toward adaptive and agentic security models." DAST as the runtime foundation for modern AppSec. Invicti believe the IDC MarketScape reflects a broader change in the role of dynamic testing. This direction reinforces Invicti's strategy of building on its deep DAST foundation to expand into an all-in-one AppSec platform. Runtime intelligence from dynamic testing provides a verification layer that helps teams understand which vulnerabilities can be demonstrated in running applications, while integrated application security capabilities provide the context and workflows needed to manage risk across the software development lifecycle. Invicti's Agentic Pentest extends this foundation with autonomous, adaptive offensive testing for deeper security assessments. The IDC MarketScape recognition follows additional independent recognition of Invicti's DAST capabilities in 2026. Latio named Invicti an Application Security Testing Leader and DAST Innovator in its 2026 Application Security Market Report, while independent benchmark testing by Miercom found Invicti DAST was the only tested solution to detect all 31 critical vulnerabilities across 11 modern application targets, earning the Miercom Certified Secure designation. About IDC MarketScape. The IDC MarketScape vendor assessment model is designed to provide an overview of the competitive fitness of technology and service suppliers in a given market. The research utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each supplier's position within a given market. IDC MarketScape provides a clear framework in which the product and service offerings, capabilities and strategies, and current and future market success factors of technology suppliers can be meaningfully compared. The framework also provides technology buyers with a 360-degree assessment of the strengths and weaknesses of current and prospective suppliers. About Invicti Security. Delivering the industry's most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation. Based in Austin, Texas, Invicti serves more than 5,000 organizations worldwide. To learn more, visit Invicti.com or follow Invicti on LinkedIn. Media contact Invicti Security Priyank Savla [email protected] Table of Contents Prove vulnerabilities, remediate faster with Invicti Experience the future of AppSec.

Invicti launches Agentic Pentest to transform modern penetration testing. The first capability in Invicti's agentic offensive security offering, combining autonomous AI and proof-based DAST for fast, cost-effective, validated penetration tests Machine Learning & Artificial Intelligence AUSTIN, Texas, July 30, 2026 /PRNewswire/ - Invicti Security, a leader in web application and API security, today announced Invicti Agentic Pentest, a new approach to penetration testing that combines autonomous AI reasoning with Invicti's industry-leading proof-based Dynamic Application Security Testing (DAST). Built on more than 20 years of application security expertise, Invicti autonomously discovers, validates, and reports exploitable vulnerabilities, enabling organizations to conduct deeper security testing without the delays, costs, and scalability limitations of traditional manual penetration testing. Modern development teams release new code daily, while traditional penetration tests remain expensive, manual, and point-in-time. AI-only approaches improve automation but often incur significant compute costs by applying frontier models across every stage of testing. Invicti addresses both challenges by combining autonomous AI with proof-based DAST. "The future of application security isn't about using more AI. It's about using AI more intelligently," said Neil Roseman, CEO of Invicti Security. "Many emerging solutions rely on large AI models throughout the entire penetration testing process. We believe there's a better way. Hybrid agentic pentesting combines autonomous AI reasoning with Invicti's proven proof-based DAST technology, applying each where it delivers the greatest value. That architecture enables faster, more cost-effective penetration testing while maintaining the deterministic validation enterprise security teams require." Hybrid agentic pentesting: the right balance The hybrid approach combines the strengths of autonomous AI with deterministic security testing. Specialized AI agents reason about application behavior, identify attack paths, and adapt testing strategies in real time, while Invicti's proof-based DAST engine applies a vast library of fast, reliable deterministic heuristics that are blended into a single report. Rather than relying on frontier AI models for every stage of testing, Invicti uses autonomous reasoning selectively, while relying on Invicti's proven DAST engine for simpler, established vulnerabilities. This hybrid architecture delivers the depth of agentic AI testing faster, with lower total cost, and with high-confidence findings that developers can immediately reproduce and remediate. Engineering & Technology Discovering vulnerabilities traditional scanners miss Invicti Agentic Pentest implements a proprietary reconnaissance engine; it maps an application's attack surface, analyzes authentication flows, and builds a contextual understanding of application behavior before generating customized attack plans. When source code is available, Invicti incorporates code-level context to create tailored attack payloads while continuing to validate every confirmed finding from an external attacker's perspective. Then, Invicti orchestrates specialized AI agents that operate in parallel across multiple vulnerability classes, including SQL injection, remote code execution, cross-site scripting, server-side request forgery, XML external entity injection, insecure deserialization, path traversal, NoSQL injection, and other attack techniques. An app-specific agent then synthesizes reconnaissance and assessment findings into a holistic attack strategy that mirrors experienced pentesters, including multi-stage attacks. During early-access deployments, Invicti Agentic Pentest identified complex attack paths and business logic vulnerabilities that traditional automated scanning alone would not have uncovered. By reasoning over proof-based DAST findings and adapting its testing strategy in real time, Invicti uncovered exploitable conditions while validating every reported vulnerability with concrete evidence. "We were impressed by what Invicti uncovered beyond traditional scanning. It connected findings, reasoned through the application, and identified attack paths our existing tools hadn't exposed. More importantly, their finds came with evidence our team quickly validated and fixed." Security leader at SaaS technology company and participant in Invicti's Early Access Program Business Operations Built for enterprise application security teams Invicti Agentic Pentest integrates with existing application security workflows, enabling organizations to replace or augment manual penetration testing with autonomous assessments that fit naturally into modern software development. Each assessment includes: * Autonomous reconnaissance and adaptive attack planning * Specialized AI agents targeting distinct vulnerability classes * Validated findings with proof of exploitability * Human-readable penetration testing reports with executive and technical summaries * Detailed reproduction steps, payloads, and remediation guidance * Enterprise controls including scope enforcement, rate limiting, role-based access, and isolated execution environments As the first capability released under Invicti's agentic offensive security approach, Agentic Pentest helps organizations accelerate remediation, reduce manual testing costs, expand security coverage, and validate the security of rapidly changing web and API applications. By combining intelligent exploration with deterministic validation, organizations gain faster assessments and a more efficient path to enterprise-scale penetration testing than approaches that rely exclusively on frontier AI models. Availability Agentic Pentest is part of the Invicti platform. Organizations can request a demonstration or learn more by visiting www.invicti.com/pentest. Machine Learning & Artificial Intelligence About Invicti Delivering the industry's most accurate application security platform, Invicti Security has been transforming the way web applications are secured for nearly 20 years. Recognized as a leader in Application Security Testing and a DAST Innovator by Latio, Invicti enables organizations to continuously scan and secure their web apps and APIs with the rigor of runtime testing and the speed of constant innovation. Based in Austin, Texas, Invicti serves more than 4,000 organizations worldwide. To learn more, visit Invicti.com or follow HiTechNectar on LinkedIn. SOURCE Invicti Security HiTechNectar send you the latest trends and best practice tips for online customer engagement: Receive Updates: HiTechNectar hate spams too, you can unsubscribe at any time.