Invicti

Invicti (formerly Netsparker) is a dynamic application security testing (DAST) platform that crawls and actively scans live web applications and APIs for vulnerabilities such as SQL injection and XSS. Its proof-based scanning technology automatically verifies many findings by safely exploiting them, which cuts down on false positives that plague typical DAST scanners — a common pain point for security teams triaging scan results. Commonly deployed in CI/CD for continuous security testing of production and staging web applications at enterprise scale.