Acunetix Reviews

Name: Acunetix
Brand: Invicti
Rating: 3.9 (36 reviews)

Vendor: Invicti

3.9 out of 5

36 reviews
88% willing to recommend

Leave a review

What is Acunetix?

Acunetix is a dynamic application security tool used globally for web application vulnerability scanning, focusing on SQL injection and cross-site scripting.

Get the Acunetix Buyer's Guide and find out what your peers are saying about Acunetix, SonarQube, Snyk and more!

Acunetix is the #5 ranked solution in top DevSecOps solutions, #8 ranked solution in AST tools, #15 ranked solution in application security solutions, and #30 ranked solution in top Vulnerability Management solutions. PeerSpot users give Acunetix an average rating of 7.8 out of 10. Acunetix is most commonly compared to SonarQube: Acunetix vs SonarQube. Acunetix is popular among the large enterprise segment, accounting for 52% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 13% of all views.

Helped 892,943 peers since 2012

Featured Acunetix reviews

Rahul Kumar

Senior Engineer - Penetration Tester at a government with 10,001+ employees

The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Read full review

Himanshu_Tyagi

Lead Cybersecurity at TBO

The crawling option in Acunetix is really good because whenever a scan is initiated, the crawling option provides good coverage about the vulnerabilities identified in the application. The attack option that comes after crawling is quite good. When the application is configured in authenticated scan mode with Acunetix, it provides good visibility about the security vulnerabilities in the application. The experience with Qualys Total Cloud was really good, as when Qualys Guard was used to scan cloud security assets, it identified the vulnerabilities and helped differentiate between valid findings and invalid findings. Qualys Guard is called Total Cloud, which means cloud assets are scanned regardless of any environment, whether it is GCP, AWS, or Azure.

Read full review

Adetunji Adeoje

Team Lead, Application Security at a financial services firm with 5,001-10,000 employees

I appreciate the upload function in Acunetix that allows me to upload so many targets at the same time in a CSV file. I also love the comprehensive reports that can generate a single report to capture all my scans, irrespective of the numbers. I appreciate the scheduling feature; when I want to schedule my scan, maybe weekly or quarterly, it scans and produces a report for me and sends it to my email. On the latest platform, Invicti, I appreciate the speed, which is quite fast, and the interface is also great. The continuous scanning feature in Acunetix is one of the features I appreciate most because I can use it to schedule my scans and be notified if there are any changes. I can do comparative scans to know if I scan this Monday and send a report to my engineer, and they can do remediation. I can do comparison to know the aging of any vulnerability that has existed for a period of time. I can track what they have closed and what they have not closed within the relevant application scope.

Read full review

Acunetix mindshare

Product category:

As of May 2026, the mindshare of Acunetix in the Application Security Tools category stands at 2.3%, down from 2.8% compared to the previous year, according to calculations based on PeerSpot user engagement data.

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Acunetix	2.3%
SonarQube	13.6%
Checkmarx One	8.8%
Other	75.3%

Application Security Tools

PeerResearch reports based on Acunetix reviews

Type	Title	Date
Category	Application Security Tools	May 7, 2026	Download
Product	Reviews, tips, and advice from real users	May 7, 2026	Download
Comparison	Acunetix vs SonarQube	May 7, 2026	Download
Comparison	Acunetix vs Checkmarx One	May 7, 2026	Download
Comparison	Acunetix vs Veracode	May 7, 2026	Download

Valuable Features

Acunetix users find the scheduling feature, comprehensive reporting, and scalability valuable. They appreciate the upload function for targets and continuous scanning. The interface is user-friendly, and the speed impresses users. The login sequence recorder and accurate detection reduce verification time for vulnerabilities. Acunetix stands out for its reporting options, offering insights into vulnerabilities, aiding compliance, and integrating with CI/CD tools, making it a flexible tool for managing security vulnerabilities efficiently.

"The most valuable feature of Acunetix is the UI and the scan results are simple."
"Acunetix is the best service in the world."
"Overall, the tool is efficient enough to identify and track your vulnerabilities and it's good for intelligence scanning purposes."

Room for Improvement

Acunetix could improve by enhancing scan speed and reducing false positives. Users mention a need for better integration capabilities, including scanning APIs and subdomains more effectively. There should be streamlined configuration processes and more intuitive reporting, especially for executive summaries. Pricing concerns arise frequently, with users suggesting a need for more affordable options. Enhanced manual testing support and advanced settings for authentication and authorization are also desired. Better customer support and technical documentation could further enhance usability.

"However, their response is too slow."
"The only problem that they have is the price. It is a bit expensive, and you cannot change the number of applications for the whole year."
"However, it doesn't seem very helpful or useful for scanning web services, and that has what I feel that the organization could work better on that."

ROI

Organizations report a 300% ROI from Acunetix over two years. They highlight cost reduction, risk management, improved security posture, and fewer required personal testers. Many vulnerabilities are identified, saving time and enhancing security. Acunetix aids in threat detection, improving processes and offering comprehensive metrics visualization, yet ROI tracking remains challenging. The tool's automated scanning capabilities reduce effort and mitigate potential attack damage, leading to license renewals and continuous evaluations affirming its value.

Pricing

Enterprise users describe Acunetix's pricing as varied, with some finding it competitive and others noting it as higher compared to alternatives. Costs often depend on factors like licensing types, domain count, and additional support. Some experience complications with pricing models for multiple sub-domains, leading to higher costs. While initial value and competitive pricing have been acknowledged, recent changes in licensing schemes have raised costs for some. Overall, many cite it as an effective, albeit sometimes expensive, solution.

"The price is exceptionally high."
"The solution is expensive."
"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."

Popular Use Cases

Acunetix is primarily used by users for securing web applications, conducting vulnerability assessments, and ensuring PCI DSS compliance. It helps in identifying issues such as SQL injection, cross-site scripting, and authentication flaws. Users leverage Acunetix for dynamic application security testing, penetration testing, and automating security checks in APIs and web apps. Organizations deploy it globally for testing applications, securing banking solutions, and scanning multiple files and applications effectively.

Service and Support

Acunetix's customer service is generally responsive and helpful, with individuals reporting quick responses to emails and calls. However, some mention delays when resolving issues, possibly due to unrelated stakeholder involvement. The support tends to effectively address inquiries, but response times can vary. Several individuals appreciate the prompt assistance, particularly for high-severity issues, although some argue the service could improve in speed. Support through resellers is noted, providing a bridge between users and Acunetix.

Deployment

Acunetix's initial setup is generally simple and straightforward, with users appreciating its ease of use. Installation ranges from a few minutes to a couple of hours. Users found cloud-based deployment more manageable, while the on-premise version posed challenges due to limited operating system compatibility. Support and documentation are readily accessible, aiding the process. Some experienced issues with upgrades and agent setups, but the overall feedback leans towards an easy installation experience.

Scalability

Acunetix demonstrates robust adaptability, efficiently accommodating expanding environments and workloads. Feedback indicates occasional performance hitches and seeks wider operating system compatibility. Typically, it suits both smaller teams and large enterprises, with a flexible response to fluctuating demands. Some users report no issues with scaling, while others highlight licensing constraints impacting expansion capacity. Various industries deploy it for IT and security roles, with diverse numbers of active users.

Stability

Acunetix is widely recognized for its stability, receiving high ratings for consistent performance. Users experience few critical issues, with reliable scans and minimal false positives. Although some report minor problems during upgrades, these are not common across all releases. Maintenance is straightforward, with updates improving stability. Users note occasional minor issues, but Acunetix typically operates without crashes or downtime, offering a stable service that handles security tasks effectively.

These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.

Download our Acunetix Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company Size	Count
Small Business	12
Midsize Enterprise	5
Large Enterprise	15

By reviewers

By visitors reading reviews
Company Size	Count
Small Business	189
Midsize Enterprise	108
Large Enterprise	318

By visitors reading reviews

Top industries

By visitors reading reviews

Financial Services Firm

13%

Computer Software Company

11%

Manufacturing Company

Government

University

Comms Service Provider

Retailer

Healthcare Company

Educational Organization

Construction Company

Performing Arts

Outsourcing Company

Real Estate/Law Firm

Energy/Utilities Company

Recreational Facilities/Services Company

Media Company

Non Profit

Transportation Company

Insurance Company

Marketing Services Firm

Pharma/Biotech Company

Legal Firm

Hospitality Company

Wholesaler/Distributor

Wellness & Fitness Company

Renewables & Environment Company

Training & Coaching Company

Compare Acunetix with alternative products

Learn more about Acunetix

Acunetix provides a comprehensive web vulnerability assessment platform designed for identifying and remediating security threats. Users benefit from its ability to schedule scans, boasting a fast detection rate for common vulnerabilities. The tool's centralized dashboard helps organizations with compliance monitoring and features such as crawling and login sequence enhancements, contributing depth to its security assessments. Despite high praise for its integration capabilities and automated scanning that saves time, pricing and false positives present challenges. Organizations often use Acunetix to maintain internal security and evaluate pre-release environments.

What are Acunetix's main features?

Comprehensive Reporting: Detailed reports assist in security analysis and compliance audits.
User-Friendly Interface: Simple navigation enhances user experience.
Scheduled Scans: Automation of scans allows for continuous monitoring.
Fast Detection: Quickly identifies vulnerabilities like SQL injection and cross-site scripting.
Integration Capabilities: Scalable solutions with compatibility across applications.
Crawling & Login Sequence: Improves depth in security analysis.

What benefits should businesses look for in reviews?

Low False Positive Rate: Accurate vulnerability detection saves time in analysis.
Time Efficiency: Automated scans reduce manual workload, improving team productivity.
Scalability: Integration features help accommodate growth and complexity.
Compliance Support: Centralized dashboard supports regulatory compliance checks.

In industries like finance, healthcare, and technology, Acunetix assists in protecting sensitive data through robust scanning and reporting capabilities. Its ability to perform dynamic assessments makes it a chosen tool in regulatory environments and development settings, offering both internal security inspections and pre-release evaluations.

Acunetix was previously known as AcuSensor.

Acunetix customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Title	Rating	Mindshare	Recommending
SonarQube	4.0	13.6%	84%	136 interviews Add to research
Snyk	4.1	5.1%	100%	51 interviews Add to research

Author info	Rating	Review Summary
Senior Engineer - Penetration Tester at a government with 10,001+ employees	3.5	I've used Acunetix for over five years to scan web applications efficiently, appreciating its detailed reports and centralized dashboard, though support and duplicate findings need improvement; overall, it saves time and supports compliance effectively.
Lead Cybersecurity at TBO	3.5	I've used Acunetix primarily for application security and found it effective and affordable, though false positives remain a concern. It's reliable, scalable, and saves time over manual assessments, especially with authenticated and continuous scanning features.
Team Lead, Application Security at a financial services firm with 5,001-10,000 employees	4.0	I use Acunetix (now Invicti) to scan web apps; cloud speed, bulk CSV uploads, scheduling, continuous and comparative scans, and comprehensive emailed reports save me time. Support is responsive, but pricing is higher than alternatives. I want automated API scanning via Swagger/JSON; I rate it 8/10.
CEO at Xcelliti	4.5	I use Acunetix primarily for penetration and security testing, benefiting from its efficient vulnerability detection, minimal false positives, and excellent integration capabilities. Improvements needed include reducing false positives and enhancing integration with newer tools like GitHub.
Information Security Engineer at Tübitak Bilgem	4.5	I use Acunetix primarily for penetration testing and find it comprehensive for web applications, supporting manual interventions and specific scenarios like CAPTCHA. It saves us time by covering attack surfaces, though I’ve encountered some update issues.
Head of Operations, Supply Chain at Lyreco Deutschland GmbH	3.0	Acunetix is user-friendly and beneficial for security engineers, enabling quick learning and effective application scanning and report generation. However, the deployment process needs improvement, particularly in creating proxy connections, and it's better suited for smaller companies compared to competitors.
Senior Business Development Manager at Intouch World	3.5	I use Acunetix primarily to identify client vulnerabilities. Its best feature is its ability to identify vulnerabilities effectively, though there are some notable false positives. Improvements in partnering are needed, but it has enhanced our security posture.
Cyber Security Engineer at Spartec	4.5	As a consultant company, we find the interactive transaction feature of Acunetix particularly valuable, along with its API inventory capabilities. However, pricing needs improvement compared to Tenable, which offers better integration and bundling of tools.

Acunetix Reviews

What is Acunetix?

Featured Acunetix reviews

Acunetix mindshare

PeerResearch reports based on Acunetix reviews

Valuable Features

Room for Improvement

ROI

Pricing

Popular Use Cases

Service and Support

Deployment

Scalability

Stability

Review data by company size

Top industries

Compare Acunetix with alternative products

Learn more about Acunetix

Acunetix customers

Related questions

Product Categories

Popular Comparisons