Invicti Security, which helps companies secure web apps, raises $625M led by Summit Partners; Invicti was created by merging Netsparker and Acunetix in 2017
Application security testing startup Invicti Security Ltd. will have bags of money to play with after raising a $625 million funding round led by Summit Partners.
Context & Ripple Effects
Invicti is what happened after Netsparker's $40M Series A in 2018: the Turn/River-backed scanner vendor, whose customers included Microsoft, Samsung, and NASA, had already been folded together with rival Acunetix in 2017 to form one company. Today's $625M round led by Summit Partners turns that roll-up into a properly capitalized platform play in dynamic application security testing.
The raise also sits inside a broader pattern of security-tool consolidation funding: continuous-monitoring vendor AttackIQ's $17.6M Series B and third-party-integration security player Astrix's $25M Series A each carved off adjacent niches, while Invicti's backers are betting on owning the scanning layer at scale.
First-order effects
- Summit Partners now holds a controlling-scale position in a consolidated web-app-scanning vendor, giving Invicti roughly 15x its prior disclosed funding to spend on product expansion or further acquisitions.
Second-order effects
- Rival DAST and AppSec testing vendors face an acquirer with fresh capital, meaning smaller scanner makers become either acquisition targets for Invicti or must consolidate among themselves to match its bundling power.
- Enterprise buyers gain fewer, larger vendors to evaluate, shifting negotiation leverage toward bundled contracts that span formerly separate products like Netsparker and Acunetix.
Third-order effects
- If well-funded consolidators keep absorbing point scanners, the AppSec market structurally moves toward platform vendors — a trajectory already visible in the next wave, where Novee emerged from stealth with AI-driven automated penetration testing backed by over $50M, attacking the same workflow from an AI-native angle.
The trend: Application security is consolidating from standalone scanners into heavily capitalized platforms, even as AI-native challengers begin rebuilding the category from scratch.