{
  "generated_from": "https://saas-ranking.com/vulnerability-management/invicti",
  "disclaimer": "Every result describes what we found at the addresses we checked on the date given. It is not a statement about what the vendor does or does not have. The score is a public transparency score, not a product or security rating.",
  "snapshot": "r6.60658",
  "snapshot_run": 6,
  "score_version": "v1",
  "vendor": {
    "name": "Invicti",
    "domain": "invicti.com"
  },
  "category": {
    "slug": "vulnerability-management",
    "name": "Vulnerability management"
  },
  "score": 83,
  "band": "B",
  "measured": 12,
  "of": 12,
  "criteria": [
    {
      "key": "dpa",
      "name": "Data processing agreement",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.invicti.com/legal/dpa",
      "addresses_checked": [
        {
          "url": "https://invicti.com/legal/dpa",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.628Z"
    },
    {
      "key": "subprozessoren",
      "name": "Subprocessor list",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "addresses_checked": [
        {
          "url": "https://invicti.com/legal/subprocessors",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.631Z"
    },
    {
      "key": "datenregion",
      "name": "Data location stated",
      "weight": 3,
      "result": "found",
      "source_url": "https://www.invicti.com/compliance/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://invicti.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.633Z"
    },
    {
      "key": "statusseite",
      "name": "Status page with history",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://status.invicti.com/",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://invicti.com/status",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com.statuspage.io/",
          "result": "Could not be fetched: fetch failed."
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.634Z"
    },
    {
      "key": "preise",
      "name": "Public pricing",
      "weight": 2,
      "result": "found",
      "source_url": "https://www.invicti.com/pricing",
      "addresses_checked": [
        {
          "url": "https://invicti.com/pricing",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.634Z"
    },
    {
      "key": "zertifizierungen",
      "name": "Certifications named",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.invicti.com/compliance",
      "addresses_checked": [
        {
          "url": "https://invicti.com/security",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/trust",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/trust-center",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/compliance",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.636Z"
    },
    {
      "key": "sla",
      "name": "Uptime SLA with a figure",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.invicti.com/legal/sla",
      "addresses_checked": [
        {
          "url": "https://invicti.com/legal/sla",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.638Z"
    },
    {
      "key": "transport",
      "name": "HTTPS enforced with HSTS",
      "weight": 2,
      "result": "found",
      "source_url": "https://invicti.com/",
      "addresses_checked": [
        {
          "url": "http://invicti.com/",
          "result": "redirects to https://invicti.com/"
        },
        {
          "url": "https://invicti.com/",
          "result": "HSTS max-age=31536000"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.639Z"
    },
    {
      "key": "tracker_vor_einwilligung",
      "name": "No third-party tracking before consent",
      "weight": 2,
      "result": "not_found",
      "source_url": null,
      "addresses_checked": [
        {
          "url": "https://invicti.com/",
          "result": "third-party requests before any interaction: 117438640.intellimizeio.com, 923-hqb-396.mktoresp.com, a.usbrowserspeed.com, ad.doubleclick.net, api.intellimize.co, api.usergems.com, b.6sc.co, bat.bing.com, bat.bing.net, c.6sc.co, cdn.bizible.com, cdn.bizibly.com, cdn.intellimize.co, cdn.jsdelivr.net, cdn.neverbounce.com, cdn.prod.website-files.com, d3e54v103j8qbb.cloudfront.net, epsilon.6sense.com, googleads.g.doubleclick.net, ipv6.6sc.co, j.6sc.co, js.zi-scripts.com, log.intellimize.co, marketo.use1-marketplace-1p-apps-prod-red.if.webflow.services, munchkin.marketo.net, px.ads.linkedin.com, region1.analytics.google.com, secure.adnxs.com, snap.licdn.com, static.hotjar.com, static.oktopost.com, stats.g.doubleclick.net, t.influ2.com, ug-webapp-public-production.s3.amazonaws.com, www.google.com, www.google.de, www.googleadservices.com, www.googletagmanager.com, www.influ2.com"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.640Z"
    },
    {
      "key": "security_txt",
      "name": "security.txt (RFC 9116)",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.invicti.com/.well-known/security.txt",
      "addresses_checked": [
        {
          "url": "https://invicti.com/.well-known/security.txt",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.644Z"
    },
    {
      "key": "subprozessor_meldung",
      "name": "Notice before subprocessors change",
      "weight": 2,
      "result": "found",
      "source_url": "https://www.invicti.com/legal/dpa",
      "addresses_checked": [
        {
          "url": "https://invicti.com/legal/subprocessors",
          "result": "reached, no match (HTTP 200)"
        },
        {
          "url": "https://invicti.com/subprocessors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/sub-processors",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/legal/dpa",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.646Z"
    },
    {
      "key": "datenschutzkontakt",
      "name": "Named privacy contact",
      "weight": 1,
      "result": "found",
      "source_url": "https://www.invicti.com/compliance/privacy-policy",
      "addresses_checked": [
        {
          "url": "https://invicti.com/legal/privacy",
          "result": "reached, no match (HTTP 404)"
        },
        {
          "url": "https://invicti.com/privacy",
          "result": "found"
        }
      ],
      "note": null,
      "measured_on": "2026-09-04T07:16:22.648Z"
    }
  ],
  "details": [
    {
      "key": "datenregion",
      "name": "Hosting location named",
      "value": "united-states",
      "subject": null,
      "quote": "We are headquartered in the United States, and personal information is transferredto, stored in, and processed in the United States as well as other countries inwhich we or our affiliates, par",
      "source_url": "https://www.invicti.com/compliance/privacy-policy",
      "measured_on": "2026-09-04T07:16:22.633Z"
    },
    {
      "key": "datenschutzkontakt_art",
      "name": "Privacy contact",
      "value": "dedicated-address",
      "subject": null,
      "quote": "[address]@invicti.com",
      "source_url": "https://www.invicti.com/compliance/privacy-policy",
      "measured_on": "2026-09-04T07:16:22.648Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "6sc.co",
      "subject": null,
      "quote": "b.6sc.co, c.6sc.co, ipv6.6sc.co, j.6sc.co",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "6sense.com",
      "subject": null,
      "quote": "epsilon.6sense.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "adnxs.com",
      "subject": null,
      "quote": "secure.adnxs.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "amazonaws.com",
      "subject": null,
      "quote": "ug-webapp-public-production.s3.amazonaws.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "bing.com",
      "subject": null,
      "quote": "bat.bing.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "bing.net",
      "subject": null,
      "quote": "bat.bing.net",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "bizible.com",
      "subject": null,
      "quote": "cdn.bizible.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "bizibly.com",
      "subject": null,
      "quote": "cdn.bizibly.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "cloudfront.net",
      "subject": null,
      "quote": "d3e54v103j8qbb.cloudfront.net",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "doubleclick.net",
      "subject": null,
      "quote": "ad.doubleclick.net, googleads.g.doubleclick.net, stats.g.doubleclick.net",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "google.com",
      "subject": null,
      "quote": "region1.analytics.google.com, www.google.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "google.de",
      "subject": null,
      "quote": "www.google.de",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googleadservices.com",
      "subject": null,
      "quote": "www.googleadservices.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "googletagmanager.com",
      "subject": null,
      "quote": "www.googletagmanager.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "hotjar.com",
      "subject": null,
      "quote": "static.hotjar.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "influ2.com",
      "subject": null,
      "quote": "t.influ2.com, www.influ2.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "intellimize.co",
      "subject": null,
      "quote": "api.intellimize.co, cdn.intellimize.co, log.intellimize.co",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "intellimizeio.com",
      "subject": null,
      "quote": "117438640.intellimizeio.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "jsdelivr.net",
      "subject": null,
      "quote": "cdn.jsdelivr.net",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "licdn.com",
      "subject": null,
      "quote": "snap.licdn.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "linkedin.com",
      "subject": null,
      "quote": "px.ads.linkedin.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "marketo.net",
      "subject": null,
      "quote": "munchkin.marketo.net",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "mktoresp.com",
      "subject": null,
      "quote": "923-hqb-396.mktoresp.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "neverbounce.com",
      "subject": null,
      "quote": "cdn.neverbounce.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "oktopost.com",
      "subject": null,
      "quote": "static.oktopost.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "usbrowserspeed.com",
      "subject": null,
      "quote": "a.usbrowserspeed.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "usergems.com",
      "subject": null,
      "quote": "api.usergems.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "webflow.services",
      "subject": null,
      "quote": "marketo.use1-marketplace-1p-apps-prod-red.if.webflow.services",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "website-files.com",
      "subject": null,
      "quote": "cdn.prod.website-files.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "drittanbieter",
      "name": "Third-party host on first load",
      "value": "zi-scripts.com",
      "subject": null,
      "quote": "js.zi-scripts.com",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.641Z"
    },
    {
      "key": "hsts_frist",
      "name": "HSTS max-age",
      "value": "31536000",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.639Z"
    },
    {
      "key": "hsts_option",
      "name": "HSTS option",
      "value": "include-subdomains",
      "subject": null,
      "quote": "max-age=31536000; includeSubDomains",
      "source_url": "https://invicti.com/",
      "measured_on": "2026-09-04T07:16:22.639Z"
    },
    {
      "key": "meldefrist_tage",
      "name": "Subprocessor notice period",
      "value": "14",
      "subject": null,
      "quote": "Client may object to the use of a new or replacement Sub-processor, by notifying Invicti promptly in writing within 14 days after receipt of Invicti’s notice.",
      "source_url": "https://www.invicti.com/legal/dpa",
      "measured_on": "2026-09-04T07:16:22.647Z"
    },
    {
      "key": "security_txt_ablauf",
      "name": "security.txt expiry",
      "value": "2029-01-16",
      "subject": null,
      "quote": "Expires: 2029-01-16T11:00:00.000Z",
      "source_url": "https://www.invicti.com/.well-known/security.txt",
      "measured_on": "2026-09-04T07:16:22.646Z"
    },
    {
      "key": "sla_prozent",
      "name": "Uptime figure",
      "value": "99.5",
      "subject": null,
      "quote": "The Cloud Service will be available for Customer to access via the Invicti provided user interface 99.5% of the time in any calendar month, excluding Excluded Downtime.",
      "source_url": "https://www.invicti.com/legal/sla",
      "measured_on": "2026-09-04T07:16:22.638Z"
    },
    {
      "key": "subprozessor",
      "name": "Subprocessor named",
      "value": "amazon-web-services",
      "subject": null,
      "quote": "AWS",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "measured_on": "2026-09-04T07:16:22.632Z"
    },
    {
      "key": "subprozessor",
      "name": "Subprocessor named",
      "value": "salesforce",
      "subject": null,
      "quote": "Salesforce",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "measured_on": "2026-09-04T07:16:22.632Z"
    },
    {
      "key": "subprozessor",
      "name": "Subprocessor named",
      "value": "slack",
      "subject": null,
      "quote": "Slack",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "measured_on": "2026-09-04T07:16:22.632Z"
    },
    {
      "key": "subprozessor",
      "name": "Subprocessor named",
      "value": "stripe",
      "subject": null,
      "quote": "Stripe",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "measured_on": "2026-09-04T07:16:22.632Z"
    },
    {
      "key": "subprozessor",
      "name": "Subprocessor named",
      "value": "zendesk",
      "subject": null,
      "quote": "Zendesk",
      "source_url": "https://www.invicti.com/legal/subprocessors",
      "measured_on": "2026-09-04T07:16:22.632Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "iso-27001",
      "subject": "anbieter",
      "quote": "View our Report ISO 27001:2025 Our Information Security Management Systems meet international security standards in data prot",
      "source_url": "https://www.invicti.com/compliance",
      "measured_on": "2026-09-04T07:16:22.637Z"
    },
    {
      "key": "zertifikat",
      "name": "Certification named",
      "value": "soc-2-type-2",
      "subject": "anbieter",
      "quote": "Enterprise Compliance SOC 2 Type 2 Our SOC 2 Type 2 report validates internal controls and systems related to security availabi",
      "source_url": "https://www.invicti.com/compliance",
      "measured_on": "2026-09-04T07:16:22.637Z"
    }
  ]
}