Invicti Professional v26.7.0 Has Been Released
Invicti Professional provides application security testing capabilities covering Web and API scanning, vulnerability detection, automated verification, and reporting. It also supports complex authentication scenarios, IAST, and CI/CD integration. Proof-Based Scanning™ can automatically verify certain detected vulnerabilities, reducing the amount of manual validation required by security teams. Version 26.5.0 improves scan policy controls, authentication workflow stability, manual crawling, scanner agent security, and the handling of customized configurations, providing a more consistent scanning and maintenance experience.
Invicti Professional provides application security testing capabilities covering Web and API scanning, vulnerability detection, automated verification, and reporting. It also supports complex authentication scenarios, IAST, and CI/CD integration. Proof-Based Scanning™ can automatically verify certain detected vulnerabilities, reducing the amount of manual validation required by security teams. Version 26.5.0 improves scan policy controls, authentication workflow stability, manual crawling, scanner agent security, and the handling of customized configurations, providing a more consistent scanning and maintenance experience.
As a web security testing tool focused on DAST and vulnerability validation, Invicti Professional v26.5.0 can simulate browser activity to analyze web applications and APIs, including entry points, parameters, authentication flows, and dynamic content. It also uses Proof-Based Scanning to provide exploitability evidence for supported vulnerabilities, reducing the number of findings that require manual verification. This release improves scan control by allowing each scan policy to use either single-browser or multi-browser mode, restoring smart card and Microsoft login authentication based on client certificates, preserving customized CWE and vulnerability templates during product upgrades, and allowing Crawl and Wait to pause after automated crawling so that testers can manually extend coverage before the attack phase begins. Its main advantage is the ability to combine automated scanning, complex authentication, and manual exploration within the same testing workflow.
The primary function of Invicti Professional v26.5.0 is to perform DAST against running web applications and APIs using automated crawling, request manipulation, vulnerability checks, and supported exploitability validation. It can be used to assess both conventional web pages and application interfaces that rely on authentication or browser interaction. Version 26.5.0 focuses on scan management and authentication reliability. Single-browser scanning can now be defined separately for each scan policy, certificate-based smart card and Microsoft authentication issues have been corrected, and customized CWE or vulnerability templates are retained during product upgrades. Crawl and Wait has also been adjusted so that users can add manually discovered content before the testing phase proceeds. These updates make the release more suitable for environments where different applications require different scanning approaches.
Invicti Professional v26.5.0 provides automated security testing for web applications and APIs by combining browser-driven exploration, vulnerability checks, and controlled validation of supported findings. It is intended to help security teams identify application-layer issues and review evidence generated during the scan. This release changes the way single-browser mode is configured by allowing the setting to be assigned separately to each scan policy. It also restores certificate authentication for smart card and Microsoft login scenarios, retains customized CWE and vulnerability templates during upgrades, and changes Crawl and Wait so that additional manual exploration can be performed before testing proceeds. The version is therefore better suited to scan environments where authentication and application discovery requirements vary between targets.
Invicti Professional v26.5.0 provides DAST functionality for applications that are available through web interfaces or APIs. During a scan, the product maps reachable content, tests parameters and application behavior, and records security findings for later review. Proof-Based Scanning can be used with supported issues to give security teams more context when deciding whether a result requires remediation. The 26.5.0 update adds policy-level control over single-browser scanning, restores expected behavior for certificate-based authentication, retains customized CWE and vulnerability definitions after product upgrades, and allows manual discovery to be inserted into the Crawl and Wait process. These updates are particularly relevant to teams that maintain several scanning profiles or test applications with non-standard authentication flows.
|
