Invicti Releases Benchmark for Agentic Pentest Tool

The cybersecurity firm evaluated its new security testing platform against rival tools using two open-source applications.

Updated on Oct. 25, 2026 in Cybersecurity

Bold flat-color editorial illustration featuring a geometric metallic shield symbol, representing precision cybersecurity testing. — Invicti has released new performance benchmarks for its Agentic Pentest tool, highlighting its capacity to verify 52 unique security vulnerabilities. AI Illustration. Upload story photo >

Live Poll

Do you trust automated security tools to reliably detect and report vulnerabilities in your software?

Invicti released performance results for its Agentic Pentest tool, which successfully identified 52 unique, verified vulnerabilities during recent testing. The benchmark assessments evaluated the software's efficiency in scanning the Fider and Photoview applications.

Why it matters

The company conducted this benchmark to demonstrate how its hybrid architecture, combining dynamic testing with autonomous AI, performs against competitors like Aikido and XBOW. These results offer transparency into the speed and precision of automated security platforms.

Invicti identified 52 total vulnerabilities, with 27 coming from DAST testing and 25 from agentic testing, across four assessments. The firm completed scans of Fider and Photoview in 46 and 50 minutes, respectively, at a combined cost of $346.

The players

Invicti

An Austin-based cybersecurity company specializing in automated application security testing and vulnerability management solutions.

The details

The research team utilized a hybrid methodology that includes one authenticated black-box assessment and one source-assisted assessment for each target application. The tests resulted in 31 links to specific source files, providing developers with actionable data to remediate the identified security flaws.

The Invicti Security Research Team conducted benchmark assessments on September 27 and September 28, 2026.
Invicti published the full benchmark results on October 24, 2026.
Introductory pricing for Invicti assessments is available until December 31, 2026.

The Tech Race

The emergence of AI-driven tools follows the industry's long-standing reliance on Dynamic Application Security Testing to find vulnerabilities in live web applications. This benchmark marks an evolution in traditional testing methods by integrating autonomous agentic AI with conventional protocols.

Security teams can leverage these findings to evaluate whether agentic pentesting reduces the time required for vulnerability remediation in their own workflows. Organizations considering this tool should note that current introductory pricing remains active only until the end of the year.

The takeaway

Automated pentesting tools are increasingly incorporating agentic AI to decrease the time and cost associated with manual security assessments. Security professionals should evaluate these tools based on their ability to minimize false positives and integrate directly with existing development source files.