Invicti vs. Pentest-Tools.com

Netsparker is very thorough but can take a very long time to scan a web application. It can also take a long time to learn and configure. Its thoroughness is a very good part of the product but if the application does [not] need this thoroughness it is probably a waste of time to run Netsparker on the website.

Incentivized

This website is well suited for organisations that perform regular security assessments. In particular, external scans and reconnaissance. As an example, I am able to run a report on our Wordpress website to enable me to see whether we are missing any important security updates. We found it to be very useful for training new security analysts, due to the straightforward GUI. You can work on the same projects together to help you to do this. Having it laid out in front of them helps them to understand the concepts much easier than using dozens of different tools to achieve the same goals, and also speeds up training. If you're a personal user it may not be appropriate due to price. If you are a personal user, I would advise using the many open source tools there are that do the same things. The strength of this platform is that it combines them into a single pane of glass, but you can achieve the same things with other tools if necessary. For example, there are many other tools that you could use to run a UDP port scan that do not cost money (EG NMAP)

Incentivized

• Netsparker is a product that many security companies use to scan their clients websites. This means it has good reputation and we can use that reputation when we show our Netsparker scan to our clients.
• Netsparker is very customizable and allows us to reduce the scan time by making sure we do not spend time scanning technologies that are not being used in the application. Once a set of customizations are configured they can be applied to similar types of applications. This allows us to quickly setup a vulnerability scan of new applications.
• Netsparker includes numerous vulnerability points to test for. This means that sometimes thousands of possible vulnerabilities are tested. Other scanners to do not always scan for all of these types of vulnerabilities.

Incentivized

• Cheaper than some other platforms
• Good support
• Cloud based
• Integrates well with identity providers

Incentivized

• NetSparker does not integrate with all systems. Currently, it is limited to popular systems, using Java for example.
• NetSparker is priced at a higher range. I believe with all its competition, the pricing could be a little better.
• NerSparker could improve its user experience. There should be a way to find out if a system has vulnerabilities directly through e-mail.

Incentivized

• No logging for things like scanning. This means you don't actually know when the scan has failed if you're not immediately on the ball.
• Reports could look better. It would be good to be able to customise the report with some different styles to suit your company's branding.
• Could have better tutorials.
• It may be useful to have a feature similar to Microsoft Secure Score, which compares your organisation to similar ones, so that you have a reference of how secure your environment actually is.

Incentivized

NetSparker support is amazing. When first introducing this software to the team, there was a lot of communication going on between Netsparker consultants and our team. They have answered our questions very efficiently and have had consultants come to our department for training. They are open to suggestions for improvements and enhancements as well.

Incentivized

Our department used to use Veracode as our security scanning software. Compared to Veracode, Netsparker has a very organized dashboard with built-in tools that making collaborating with other teammates very efficient and easy. Another teammate can definitely take over the work I am doing in NetSparker with minimal explanation.

Incentivized

Offers a great number of tools in one interface, giving you a single pane of glass to work from. Therefore, it's favourable compared to some of these other products, that do similar things but are less intuitive and less easy to use. This makes it not only easier to use, but easier to report results to your customers. Also, although the price point can seem high, once you start adding multiple paid tools that do the same job, there probably isn't a massive amount of difference (if any)

Incentivized

• NetSparker has saved the team a lot of time since the scans quicker than our older software.
• NetSparker has been costing the company a lot compared to previous security software.
• Netsparker has helped improved our overall business objectives by finding an efficient and collaborative way to run scans on our systems.

Incentivized

• Price point allows us to sell the solution at an excellent margin
• Freed up time due to the automated solutions, allowing us to utilise staff better
• Use from anywhere due to being cloud based

Incentivized