Number of Seats/Users: Invicti offers discounts based on the number of users or seats. A higher volume typically leads to a better discount structure, especially for enterprise-level usage.

Commitment to a Long-Term Contract: Discounts are often provided to companies that commit to using the service for a longer period (e.g., 1-year or 3-year contracts). A longer commitment shows Invicti that the company is serious and willing to invest in the platform long-term.

No Active Discounts: Companies that are not already receiving other active discounts may have a better chance of qualifying for additional discounts from Invicti. Invicti reserves discounts for new customers or those not currently under promotional pricing.

Volume or Usage Commitment: Invicti offers discounts if you agree to a minimum amount of usage or transaction volume. This could be based on data storage, transactions, or other metrics tied to how much you will use the platform.

Enterprise-Level Negotiation: Companies that qualify as “enterprise” due to their size or complexity (e.g., having large teams, multiple departments, or geographical presence) may be eligible for additional discounts from Invicti. Such companies are often in a position to negotiate for better pricing.

Early Renewal or Prepayment: Invicti often offers discounts if you renew early or prepay for the entire contract period. This is a common approach to securing a lower price.

Here at Spendbase our internal data shows that Invicti (including the legacy Netsparker/Acunetix branding) consistently delivers strong value for application security teams, but there are a few patterns worth knowing before you commit or renegotiate.

What Spendbase clients like most
– Ease of use and onboarding
– Frequently described as intuitive and “up and running in minutes”
– Friendly UI and dashboards that help both security engineers and leadership
– High-quality findings
– Strong focus on exploitable vulnerabilities with fewer false positives than many peers
– Proof-based scanning and clear remediation guidance speed up fix cycles
– Reporting and collaboration
– Executive-ready reports out of the box
– Useful integrations into tools like Jira, Slack, CI/CD, and other AppSec platforms
– Flexibility and coverage
– Good support for complex web apps and SPAs
– Customizable scan policies and multiple report templates
– On-prem and cloud deployment options

Where Spendbase clients see friction
– Pricing and licensing
– Perceived as expensive for smaller organizations
– Frustration around rigid licensing (domain rotation, short-lived sites, scan “packs” removed)
– Performance
– Scan times can be slow for large or complex applications, especially with broad coverage
– Concurrent scans and desktop agents can be resource-hungry
– UX and usability gaps
– Interface occasionally feels cluttered or dated
– Some advanced features (discovery, API scanning, session recording, captcha, etc.) take time to tune
– Product gaps and roadmap expectations
– Desire for richer API discovery and scanning
– Requests for more flexible reporting formats (e.g., CSV)
– Some clients want better false-positive handling and ignoring of known items across scans

Support and documentation
– Our internal data shows very strong satisfaction with support: fast, helpful, and willing to customize scans.
– Documentation used to be a pain point for some, but sentiment indicates noticeable improvement over time.
– A minority reported slow or unhelpful responses, so experience may depend on account tier and region.

From a Spendbase discount and optimization perspective, Invicti tends to justify its price in mid-to-large enterprises that:
– Run frequent scans across many apps
– Need executive-grade reporting
– Care about deep DAST with integrated SAST/SCA

For smaller teams or limited estates, we often see room to negotiate on license scope, deployment mix (cloud vs on-prem), and bundle configurations to avoid overbuying features that won’t be fully used.