We may earn a commission if you buy through links on this page. It never changes a score or a ranking. How we make money
Pricing is quote-based.
Invicti has no listed free plan or free trial, so teams evaluating its scanners should budget for a paid plan or request a sales quote. Agentic Pentest is priced at a maximum of $500 per pentest. Web + API, AppSec Core, AppSec Flex, and Your AppSec are subscription or custom offerings, but their monthly and annual prices are not published. Ask for a quote tied to your scan scope, deployment model, and required features.
01Every plan, line by line
| Plan | Billed annually | Billed monthly | Built for |
|---|---|---|---|
| Agentic Pentest | — | Quote | Teams assessing one application and API suite |
| Web + API | — | Quote | Teams securing web apps and APIs |
| AppSec Core | — | Quote | Teams covering code, runtime, and supply chain |
| AppSec Flex | — | Quote | Enterprise teams needing deployment flexibility |
| Your AppSec | — | Quote | Organizations needing a tailored package |
02What the plan grid doesn't tell you
Subscription quote
Web + API, AppSec Core, and AppSec Flex have no published subscription price. Request a quote for your application inventory and expected scanning cadence.
Custom plan scope
Your AppSec is tailored to specific needs. Confirm which scanners, integrations, deployment options, and support are included in the quoted package.
Deployment requirements
AppSec Flex lists cloud and on-premises options, including air-gapped deployment. Ask whether your chosen deployment changes infrastructure or service costs.
Pentest scope
Agentic Pentest costs up to $500 per pentest. Confirm the scope covered by a pentest and how additional assessments are priced.
03Which plan should you buy?
| If you are… | Get | Why |
|---|---|---|
| Team testing one application | Agentic Pentest | A per-pentest option with validated findings, remediation guidance, and delivery within 24 hours. |
| Team securing web apps | Web + API | Lists DAST, proof-based scanning, API discovery, runtime validation, and cloud hosting. |
| Enterprise with deployment needs | AppSec Flex | Includes AppSec Core plus Bring Any Cloud, on-premises, air-gapped deployment, custom roles, and CSPM integration. |
04Is Invicti worth the money?
Invicti may be worth paying for when a team wants DAST, code and dependency scanning, and vulnerability management in one platform, or needs AppSec Flex deployment options. The published price for Agentic Pentest makes that offer easier to assess, but subscription costs cannot be compared from public rates because the vendor does not publish them. There is no listed free tier or self-hosted open-source option. Request a scoped quote and validate API coverage before committing.
Invicti pricing FAQ
Does Invicti have a free plan?
The pricing page does not list a free plan or free trial. Teams evaluating the platform should ask Invicti about a demonstration or proof-of-concept arrangement and confirm whether any evaluation access has a fee or feature limits.
What is the starting price for Invicti?
Invicti does not publish a starting subscription price for Web + API, AppSec Core, or AppSec Flex. Agentic Pentest is listed at a maximum of $500 per pentest. Request a quote for subscription plans based on your required coverage and deployment.
Is Agentic Pentest a subscription?
No. The pricing page lists Agentic Pentest per pentest, at a maximum of $500 per pentest. It includes delivery within 24 hours, audit-ready PDF reports, validated findings, and remediation guidance.
Which Invicti plan supports on-premises deployment?
AppSec Flex lists Bring Any Cloud and on-premises options, including air-gapped deployment. Ask Invicti to confirm the exact components available for your deployment, any infrastructure requirements, and the quote for your configuration.