Introducing G2.ai, the future of software buying.Try now
Compare Invicti (formerly Netsparker) and ZAP by Checkmarx 
Featured Products
At a Glance
Market Segments
Enterprise (48.4% of reviews)
Small-Business (75.0% of reviews)
Entry-Level Pricing
No pricing available
Free
Invicti (formerly Netsparker)
Star Rating
(68)4.6 out of 5
Market Segments
Enterprise (48.4% of reviews)
Pros & Cons
Entry-Level Pricing
No pricing available
Learn more about Invicti (formerly Netsparker)ZAP by Checkmarx
Star Rating
(12)4.7 out of 5
Market Segments
Small-Business (75.0% of reviews)
Pros & Cons
Entry-Level Pricing
Free
Learn more about ZAP by CheckmarxInvicti (formerly Netsparker) vs ZAP by Checkmarx
- Reviewers felt that ZAP by Checkmarx meets the needs of their business better than Invicti (formerly Netsparker).
- When comparing quality of ongoing product support, reviewers felt that Invicti (formerly Netsparker) is the preferred option.
- When assessing product direction, Invicti (formerly Netsparker) and ZAP by Checkmarx received similar ratings from our reviewers.
Pricing
Entry-Level Pricing
Invicti (formerly Netsparker)
No pricing availableFree Trial
Invicti (formerly Netsparker)
No trial information availableZAP by Checkmarx
Free Trial is available
Ratings
Meets Requirements
9.1
58
9.6
12
Ease of Use
9.1
58
9.0
12
Ease of Setup
9.1
48
Not enough data
Ease of Admin
9.2
46
Not enough data
Quality of Support
8.9
58
8.1
12
Has the product been a good partner in doing business?
9.6
44
Not enough data
Product Direction (% positive)
10.0
54
10.0
11
Features by Category
Administration
8.7
18
Not enough data
9.5
21
Not enough data
9.0
21
Not enough data
Risk Analysis
Feature Not Available
Not enough data
9.3
22
Not enough data
9.2
22
Not enough data
Threat Protection
7.9
13
Not enough data
Feature Not Available
Not enough data
8.1
13
Not enough data
Feature Not Available
Not enough data
Generative AI
Feature Not Available
Not enough data
Administration
8.1
13
8.3
12
8.3
13
8.8
12
9.0
17
8.8
12
Analysis
8.4
15
8.1
12
9.0
17
8.2
12
9.7
17
9.4
12
Testing
7.6
12
7.6
12
8.6
15
7.5
12
8.9
17
8.6
12
9.3
17
8.9
12
Static Application Security Testing (SAST)Hide 14 FeaturesShow 14 Features
Not enough data
Not enough data
Administration
Not enough data
Not enough data
Not enough data
Not enough data
Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Testing
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Static Application Security Testing (SAST)
Not enough data
Not enough data
Administration
8.2
21
Not enough data
8.3
20
Not enough data
Analysis
8.9
28
Not enough data
9.2
26
Not enough data
Feature Not Available
Not enough data
9.3
28
Not enough data
7.5
17
Not enough data
Testing
7.1
19
Not enough data
8.5
23
Not enough data
8.4
23
Not enough data
9.1
20
Not enough data
8.6
21
Not enough data
7.5
20
Not enough data
Performance
8.6
18
|
Verified
Not enough data
9.0
18
|
Verified
Not enough data
8.1
19
|
Verified
Not enough data
9.1
18
|
Verified
Not enough data
Network
8.7
14
|
Verified
Not enough data
8.6
11
|
Verified
Not enough data
8.3
11
|
Verified
Not enough data
Application
8.2
15
Not enough data
8.2
15
|
Verified
Not enough data
9.2
18
|
Verified
Not enough data
Agentic AI - Vulnerability Scanner
Not enough data
Not enough data
Not enough data
Not enough data
Functionality - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Effectiveness - Software Composition Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
API Management
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Security Testing
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Not enough data
Not enough data
Security Management
Not enough data
Not enough data
Feature Not Available
Not enough data
Feature Not Available
Not enough data
Application Security Posture Management (ASPM)Hide 11 FeaturesShow 11 Features
Not enough data
Not enough data
Risk management - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Integration and efficiency - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Reporting and Analytics - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Application Security Posture Management (ASPM)
Not enough data
Not enough data
Not enough data
Not enough data
Agentic AI - Static Code Analysis
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Cloud Visibility
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Security
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Identity
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Not enough data
Interactive Application Security Testing (IAST)Hide 1 FeatureShow 1 Feature
Not enough data
Not enough data
Agentic AI - Interactive Application Security Testing (IAST)
Not enough data
Not enough data
Categories
Categories
Shared Categories
Invicti (formerly Netsparker) and ZAP by Checkmarx are categorized as Dynamic Application Security Testing (DAST) and Penetration Testing
Unique Categories
Invicti (formerly Netsparker) is categorized as Website Security, API Security, Static Application Security Testing (SAST), Vulnerability Scanner, Software Composition Analysis, Static Code Analysis, Interactive Application Security Testing (IAST), and Application Security Posture Management (ASPM)
ZAP by Checkmarx has no unique categories
Reviews
Reviewers' Company Size
Invicti (formerly Netsparker)
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
ZAP by Checkmarx
Small-Business(50 or fewer emp.)
Mid-Market(51-1000 emp.)
Enterprise(> 1000 emp.)
Small-Business
(50 or fewer emp.)
Mid-Market
(51-1000 emp.)
Enterprise
(> 1000 emp.)
Reviewers' Industry
Computer Software
12.5%
Telecommunications
10.9%
Financial Services
9.4%
Information Technology and Services
7.8%
Internet
6.3%
Other
53.1%
Computer & Network Security
41.7%
Information Technology and Services
25.0%
Computer Software
16.7%
Internet
8.3%
Hospital & Health Care
8.3%
Other
0.0%
Alternatives
Discussions
What is the difference between Netsparker Desktop and Netsparker Cloud?
1 Comment
Official Response from Invicti (formerly Netsparker)
To start off with, as the name implies, Netsparker Cloud is an online web application security scanner and Netsparker Desktop is a Windows software scanner....Read more
What is a Scan Policy?
1 Comment
Official Response from Invicti (formerly Netsparker)
Scan policies in Netsparker allow you to save a specific Netsparker configuration setup so you do not have to configure the scanner each time you scan a...Read more
What are the different vulnerability severities in Netsparker?
1 Comment
Official Response from Invicti (formerly Netsparker)
Netsparker web application security scanner scans for a wide variety of vulnerabilities in websites, web applications and web services.
Each vulnerability...Read more
ZAP by Checkmarx has no discussions with answers
Hunting for software insights?
With over 3 million reviews, we can provide the specific details that help you make an informed software buying decision for your business. Finding the right product is important, let us help.
