| Category | Small business | Mid-market | Enterprise |
|---|---|---|---|
| Dynamic application security testing | 4% · 7 of 53 2 labels | not named | 0% · 32 of 54 1 label |
| Category | Function | Named in | Named instead, first-choice share |
|---|---|---|---|
| Dynamic application security testing | Developer platform | 0 of 84 | OWASP ZAP 29% · Invicti 20% · Acunetix 12% |
| Kind | Pages | Last 90 days | 2025-10 to 2026-09 | Latest | Categories named |
|---|---|---|---|---|---|
| Blog | 1,006 | undated | SAST, WAF | ||
| Webinar or virtual event | 204 | undated | SAST | ||
| News or press | 170 | undated | SAST, SCA | ||
| Report or ebook | 126 | undated | |||
| Glossary or explainer | 90 | undated | SCA, SAST | ||
| Comparison | 54 | undated | SAST, SCA | ||
| Case study | 39 | undated | |||
| Conference or event | 36 | undated | |||
| Podcast or video | 35 | undated | |||
| Template or tool | 29 | undated |
Every page invicti.com exposes, subdomains included. Kind is read from the address and title. The last 90 days, the latest date and the twelve months count pages by when they were published, from the site's feeds, a date in the address, or the page's own publication date, read from up to a hundred of its most recently changed pages; a page that says only when it last changed is counted in its kind but not in when, so the recent counts are a floor, and a kind none of whose pages gives a publication date reads undated. Of its titles that name a category, most name SAST (19); 0 name the category the models place it in. An event counts as online when its address or title says so (webinar, on demand, virtual or online summit); a conference, summit, trade show, expo or roadshow that does not say so is counted as a conference or event, which on a vendor's site is mostly in person. Read September 29, 2026.
Claiming is free and changes nothing in the data. A claimed page shows a verified contact who is told when each edition publishes and when Invicti Web + API's standing changes by more than the noise floor; the right to propose corrections to the vendor table, meaning names the judge wrote that should or should not read as Invicti Web + API, applied by version and listed in the change log; and a one-line description supplied by the vendor and marked as such.
A new claim receives the current edition's vendor brief for Invicti Web + API by email, built from the raw record of the edition. It shows: