Detectify Surface Monitoring vs Invicti
Detectify Surface Monitoring
detectify.com
Invicti
invicti.comSide by side
| Figure | Detectify Surface Monitoring | Invicti |
|---|---|---|
| Price from | €208.33/mo | — |
| Free plan | Yes | — |
| Free trial | Yes | — |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Self-hosted | — | Yes |
| Plans published | 5 | 4 |
| Spec score · Website Security Software | 8.2 (#4) | 7.6 (#9) |
| Spec score · Application Security Testing | 8.1 (#7) | 7.6 (#14) |
| Spec score · Vulnerability Scanner Software | 8.3 (#9) | 7.7 (#14) |
| Headquarters | Stockholm, Sweden | Austin, Texas, United States |
| Integrations | Detectify lists integrations including Jira, Slack, Microsoft Teams, PagerDuty, OpsGenie, ServiceNow, Splunk, webhooks, GitLab, and GitHub Actions. | The features page says Invicti integrates with more than 110 tools, including CI/CD platforms, issue trackers, and collaboration tools. |
| Purpose | Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations. | Invicti is an application security platform that helps organizations find, prioritize, and fix application risk. |
| Support | The pricing page lists email support for Starter, professional support for Standard, and dedicated customer success support for Professional and Enterprise. | Subscriptions include support, with premium support, guided success, and professional services available depending on package. |
Plans
Detectify Surface Monitoring
- StarterFree
- StarterFree
- Standard€2,500 a year
- Professional€5,000 a year
- Enterprise€15,000 a year
Invicti
- Agentic Pentest$500, paid once
- AppSec CorePriced on request
- AppSec FlexPriced on request
- Web + APIPriced on request
In their own words
Detectify Surface Monitoring
Detectify Surface Monitoring continuously monitors internet-facing subdomains for exposed files, vulnerabilities, and misconfigurations. It discovers domains, subdomains, IP addresses and ranges, open ports, and running technologies; cloud connectors for AWS, Azure, Cloudflare, and GCP can help locate assets across an external attack surface. Thousands of security tests cover issues such as misconfigurations, XSS, SSRF, and RCE. Teams can define custom rules for particular changes, then filter and tag findings that include remediation tips. The cloud service supports API access, authenticated and browser-based scanning, API testing, and CI/CD integration. Integrations include Jira, Slack, Microsoft Teams, PagerDuty, OpsGenie, ServiceNow, Splunk, webhooks, GitLab, and GitHub Actions. Detectify says research from a community of more than 400 ethical hackers informs the product, with some findings reaching implementation in as little as 15 minutes. Plans list annual platform fees from free for Starter to €15,000 a year for Enterprise; monitoring costs extra per domain on every plan. A 14-day trial is listed.
Invicti
Invicti is an application security platform for finding, prioritizing, and fixing application risk. Its testing engines cover DAST, SAST, software composition analysis, infrastructure as code, secrets, and container security. The platform discovers and tests REST, SOAP, and GraphQL APIs, including authorization flaws such as BOLA and BFLA. Invicti says Proof-Based Scanning confirms vulnerabilities with 99.98% accuracy. Findings are prioritized using runtime reachability, exploitability, business impact, and threat intelligence. DAST results can be correlated with SAST, developer ownership, reproduction context, and remediation guidance. Integrations include more than 110 tools, such as GitHub Actions, Jira, Jenkins, Azure Pipelines, ServiceNow, and Slack. Deployment varies by package; AppSec Flex includes cloud, on-premises, Bring Any Cloud, and air-gapped options. Compliance reports cover HIPAA, PCI DSS, OWASP Top 10, and other standards. Agentic Pentest costs $500, paid once for one application and its API suite, delivered within 24 hours with audit-ready PDF reports.