Invicti website screenshot

Invicti

Invicti is an enterprise web application security solution providing automated vulnerability scanning, DAST, and API security testing. The Invicti platform includes API Discovery capabilities that help build a complete inventory of an organization's internal and external API assets.

Invicti publishes 1 API on the APIs.io network. Tagged areas include API Security, DAST, Security, and Vulnerability Scanning.

Invicti’s developer surface includes engineering blog, documentation, support, and 6 more developer resources.

🌐 Visit website 📡 Source on GitHub
22.3/100 emerging ▬ flat Agent 3/100 human only Full breakdown ↓
scored 2026-08-05 · rubric v0.9.1
AccessFreemium
1 APIs
API SecurityDASTSecurityVulnerability Scanning

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-05 · rubric v0.9.1
Composite quality — 22.3/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 3.0 / 20
Commercial Clarity 9.5 / 20
Operational Transparency 4.8 / 13
Governance 0.0 / 12
Discoverability 5.0 / 10
Agent readiness — 3/100 · human only
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 0 / 10
Idempotency 0 / 9
Stable Error Semantics 0 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 7 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/invicti: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Invicti API

The Invicti API provides programmatic access to Invicti security scanning capabilities, including API Discovery which helps build a complete inventory of an organization's inter...

Pricing Plans 1

Published pricing tiers and plan structures.

Invicti Plans Pricing

3 plans

PLANS

Rate Limits 1

Documented rate limits and quota policies.

Invicti Rate Limits

5 limits

RATE LIMITS

FinOps 1

Cost, billing, and metering signals for API financial operations.

Invicti Finops

FINOPS

Security Posture 3

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Invicti Domain Security

TLSv1.3 · HSTS · DNSSEC · DMARC

SECURITY

Invicti Vulnerability Disclosure

security.txt · contact published

SECURITY

Invicti Trust Center

SOC 2, ISO 27001, PCI DSS

SECURITY

Resources

Documentation 1

Reference material describing how the API behaves

Documentation
Documentation

Build 1

SDKs, sample code, and the tooling you integrate with

GitHubOrganization
GitHubOrganization

Access & Security 3

Authentication, authorization, and security posture

TrustCenter
TrustCenter
 VulnerabilityDisclosure
VulnerabilityDisclosure
 DomainSecurity
DomainSecurity

Operate 1

Status, limits, changes, and where to get help

Support
Support

Company 3

The organization behind the API

Blog
Blog
 LinkedIn
LinkedIn
 Website
Website

Source (apis.yml)

apis.yml Raw ↑ 
aid: invicti
name: Invicti
description: Invicti is an enterprise web application security solution providing automated vulnerability scanning, DAST,
  and API security testing. The Invicti platform includes API Discovery capabilities that help build a complete inventory
  of an organization's internal and external API assets.
type: Index
accessModel:
  pricing: freemium
  onboarding: unknown
  trial: false
  try_now: false
  public: false
  label: Freemium
  confidence: medium
  source:
  - plans
  generated: '2026-07-22'
  method: derived
image: https://kinlane-images.s3.amazonaws.com/shared/apis-json/icons/invicti.png
tags:
- API Security
- DAST
- Security
- Vulnerability Scanning
created: '2025-01-08'
modified: '2026-04-28'
url: https://raw.githubusercontent.com/api-evangelist/invicti/refs/heads/main/apis.yml
specificationVersion: '0.19'
apis:
- aid: invicti:invicti-api
  name: Invicti API
  description: The Invicti API provides programmatic access to Invicti security scanning capabilities, including API Discovery
    which helps build a complete inventory of an organization's internal and external API assets.
  humanURL: https://www.invicti.com/support/invicti-api/
  tags:
  - API Security
  - Security
  - Vulnerability Scanning
  properties:
  - type: Documentation
    url: https://www.invicti.com/support/invicti-api/
  - type: GettingStarted
    url: https://www.invicti.com/support/api-discovery-overview/
common:
- type: TrustCenter
  url: security/invicti-trust-center.yml
- type: VulnerabilityDisclosure
  url: security/invicti-vulnerability-disclosure.yml
- type: DomainSecurity
  url: security/invicti-domain-security.yml
- url: https://www.invicti.com/blog/
  type: Blog
- type: GitHubOrganization
  url: https://github.com/Invicti-Security
- type: LinkedIn
  url: https://www.linkedin.com/company/invicti-security
- type: Website
  url: https://www.invicti.com/
- type: Documentation
  url: https://www.invicti.com/support/
- type: Support
  url: https://www.invicti.com/support/
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com