Invicti sells automated application security testing for web applications and APIs, with a stack that pairs classic scanners (Acunetix, Netsparker, Burp Suite) with agent frameworks like LangGraph, AutoGen, CrewAI and AWS Bedrock. Its projects point to an agentic pentesting platform, MCP integrations and Opengrep-based static rules. Senior, security-heavy hiring is accelerating around detection accuracy and false-positive reduction.
Invicti is an application security company headquartered in Austin, Texas, focused on scanning and securing web applications and APIs. Its specialties span DAST, SAST, IAST and ASPM, and it serves organizations of all sizes across industries worldwide. The privately held company was founded in 2018 and employs 201–500 people. It hires in the United States and Malta, with go-to-market operations running on Salesforce, Marketo, Outreach and 6sense.
Invicti uses Python, Go, C#, JavaScript and Vue, runs on AWS with Kubernetes, Docker, GitLab and Jenkins, and builds AI features with LangGraph, AutoGen, CrewAI, AWS Bedrock, RAG and MCP.
Yes. Security is Invicti's most active hiring area, with mostly senior and staff-level roles, alongside engineering, support and product openings in the United States and Malta.
Invicti is building an agentic pentesting platform, attack chain templates, Opengrep detection rules, MCP integrations and evaluation harnesses, while extending support for new programming languages.
Other companies in the same industry, closest in size
Invicti's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.
