Our Austin

Invicti Releases Benchmark Results for Pentest Tool

The Austin firm identified 52 vulnerabilities in under an hour of testing for Fider and Photoview applications.

Updated on Oct. 25, 2026 in Cybersecurity

Isometric editorial illustration showing a modular arrangement of interconnected geometric columns, representing structural software security testing benchmarks.
Austin-based Invicti reported that its new Agentic Pentest tool identified 52 unique vulnerabilities across four web applications during recent benchmark assessments. AI Illustration. Upload story photo >

Live Poll

Do you trust automated security tools to reliably detect and report vulnerabilities in your software?

Austin-based Invicti has published benchmark results for its new Agentic Pentest tool, identifying 52 unique vulnerabilities across four web application assessments. The internal tests, which compared the tool against rival platforms, focused on open-source applications Fider and Photoview.

Why it matters

As tech firms in Austin look to automate security, the push for tools that combine human-like investigation with scanning speeds is intensifying. These benchmarks offer a glimpse into how new hybrid security models perform against legacy DAST methods and competing products.

Invicti identified 52 unique vulnerabilities during tests costing a combined $346, with assessment times ranging from 46 to 50 minutes. The results compared Invicti against Aikido and XBOW tools, though precise comparative data for those competitors remains unknown.

The players

Invicti

An Austin-based cybersecurity firm specializing in automated web application security testing.

The details

The research team utilized a hybrid architecture that blends dynamic application security testing with AI-driven investigation. The assessments, conducted in September, included one authenticated black-box and one source-assisted review for both Fider version 0.33.0 and Photoview version 2.4.0. Of the vulnerabilities discovered, 27 were found through DAST methods, while 25 were caught via agentic testing. The report provided 31 links back to specific source files to assist with remediation.

Timeline

  1. September 27-28, 2026: Invicti research team conducts the benchmark assessments.

  2. October 24, 2026: Invicti publishes the final results of the benchmark.

  3. December 31, 2026: Introductory pricing for these assessments ends.

The Texas Context

This benchmark underscores the industry-wide move from traditional DAST scanning toward autonomous, agentic AI security testing. It pits these emerging workflows against established practices to see if AI can match the depth of human-led pentesting.

Local developers and security teams using Fider or Photoview can review the 31 source file links to address the discovered vulnerabilities in their own environments. Teams interested in testing the platform can access introductory pricing rates before the end of the year.

The takeaway

The study demonstrates how agentic AI can augment standard security scanning by catching vulnerabilities that DAST might miss in under an hour. Interested security professionals should monitor the Invicti research portal for the expiration of introductory pricing on December 31, 2026.

Further reading

For more on how local firms are securing digital infrastructure, visit our Cybersecurity section.

Source note: This article includes information reported by The Daily Times.

Live Poll

Do you trust automated security tools to reliably detect and report vulnerabilities in your software?