08-24-2026, 08:43 AM
Invicti Professional is a dynamic application security testing (DAST) tool for Web applications and APIs. It provides automated crawling and vulnerability scanning, detection of common Web vulnerabilities such as SQL injection and XSS, API security testing, authenticated scanning, Proof-Based Scanning™ for automated vulnerability verification, IAST-assisted testing, compliance reporting, and CI/CD integration, helping security teams identify, verify, and manage application security risks. Building on these capabilities, **version 26.7.0** focuses on improvements to vulnerability verification, security configuration, and scan stability. It adds Proof data for legacy TLS protocol vulnerabilities, automatically preserves existing sensitive credentials when scan configurations are updated through the API, masks OTP Secret Keys in the user interface, and adds CWE-829 classification for Polyfill.io supply chain attack detection. It also addresses service stability issues caused by large numbers of scheduled scans starting concurrently, improves the identification of affected parameters in vulnerability details, and fixes Agent assignment issues when scheduled scans use the “Any available Agent” option, improving vulnerability evidence, sensitive information protection, and scan task management.
