Acunetix Reviews

It is top-rated and widely employed for conducting security assessments on networks, websites, and applications. It is considered the gold standard for evaluating security measures and identifying vulnerabilities in websites, networks, and applications. The tool's extensive capabilities make it a go-to choice for ensuring security. It is renowned for its comprehensive scanning and assessment of networks and websites, but it is also known for its significant cost, particularly for deploying it on large clusters.

One of its primary features is its ability to offer automated solutions for application security. It comes equipped with an internal applicator, which automatically identifies and addresses vulnerabilities within the program. It then provides insights on how to rectify these issues, even showcasing the payloads and other relevant information in the report. Occasionally, it may generate some false positives, but for the most part, it delivers reports that are approximately 80% accurate. This allows users to manually test the function and ascertain its functionality. It also allows for communication with external entities, vendors, and servers used by the application. This information encompasses server hosting details, the status of open or closed ports, and insights into Indian Palantir, among others. These features make it an invaluable resource for those seeking to comprehensively understand their website's infrastructure and potential vulnerabilities.

The initial concern that comes to mind is the cost as the pricing structure is significantly high, especially for the average user. It amounts to approximately $2,000 per year, excluding additional expenses. There's a clear need for a reduction in pricing to make the service more accessible. Another critical enhancement should focus on the tool's ability to bypass Web Application Firewalls. Currently, it falls short in this aspect, which can be a significant limitation.

I have been working with it for nine years now.

It provides good stability abilities.

It offers excellent scalability capabilities. You have the flexibility to adjust your usage based on workload demands and it becomes a valuable and frequently used tool to accommodate the increased workload when multiple projects come in. I would rate it nine out of ten.

I am not very satisfied with the customer support they provide. It tends to be quite time-consuming. When I raised a ticket seeking assistance with a simple issue, their response time was notably delayed. They mentioned having a backlog of inquiries, and it took a while for them to address my specific question. There seems to be a disconnect between the amount of money they charge for their support services and the level of support they provide.

The initial setup was straightforward. I would rate it nine out of ten.

You can easily download the application and install it on your desktop. The setup algorithm simplifies the application installation on your computer, it automatically configures itself on your system, eliminating the need for any manual configuration. It's a quick and hassle-free installation, taking just about five minutes to set up and configure. The deployment management is quite efficient and it can be handled by a single individual.

The price is exceptionally high. They offer various categories of services, but the problem lies in the lack of transparency. Before purchasing, they don't clearly outline the available versions or their limitations, and they don't display their pricing on the website. They should have a standardized pricing structure readily available on their website for all potential users to see. This lack of pricing information is a rarity and an issue that needs to be addressed.

To effectively utilize this tool on a monthly basis, users must possess a certain level of expertise. It is crucial that individuals who wish to employ this tool have experience in both programming and networking to make the most of its functionalities. I would rate it eight out of ten.

The primary use case of the solution is to scan our web applications for vulnerabilities.

The most valuable feature of the solution is the speed at which it can scan multiple domains in just a few hours.

The solution can be improved by adding the ability to scan subdomains automatically, and by providing reports that can be exported to external databases to share with other solutions. The solution is also costly and can use a price reduction.

I have been using the solution for two years.

The initial setup is not complex. You can be set up and start your first scan within an hour.

The implementation was done in-house.

The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned. The minimum package is five domains or subdomains.

The other options I evaluated are AppSpider, Netsparker, and HCL AppScan.

I give the solution nine out of ten.

The solution is faster than AppSpider when scanning primary domains but it does not scan subdomains. If you require a solution that does a more in-depth scan I don't recommend the solution.  

Acunetix is the best service in the world. It is easy to manage. It gives a lot of information to the users to see and identify problems in their site or applications. It works very well. 

The only problem that they have is the price. It is a bit expensive, and you cannot change the number of applications for the whole year.

We have been partners for two years.

For such services, scalability is not relevant because you just scan your service and make a document of the problems that you have. After that, you have to take care of them and fix them. So, it's not like other services that have to be working 24/7. You only run it and receive information.

Its users vary because in some companies, the web is under the IT team, and in some companies, the web is under security, CISO, or something like this. It depends on how much personnel the company has to manage these tools.

The Acunetix team is in Malta. They are very good, and they provide support over the phone. They are available 24 hours a day, and they answer your queries very fast. They're very active and good.

It is a bit complicated, but their support is very good in case of any issues. It can be on-prem or on the cloud. It depends on what the customer wants.

You don't need more than one person for its maintenance.

It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year. 

In terms of additional costs, you may need an expert in applications/sites to write the code and fix the code problems. You can do all the things by yourself because it tells you what to do, how to fix, and what to change, but you have to give your people time to take care of those things.

For SMB customers, it is a good tool to take care of the applications and the website of the company. It works well, but it is a bit expensive. I would advise others to prepare the money for it.

I would rate it a nine out of ten.

The primary use is mainly related to vulnerability assessment, including both public and internal IP addresses.

By using this tool, we have reduced the workload and increased the productivity of users.

It generates automated reports. This feature is beneficial when sharing reports with clients as it works as a unique selling point due to how attractive and descriptive the reports are.

The interface API and other functionalities are very good. However, the cost can be reduced as management has noted it to be on the higher side.

I have been working with Acunetix for almost two years.

The technical support provided by Acunetix is absolutely great. We received support from them at every point in time.

Positive

I used Nessus in one of my previous organizations due to cost reasons. However, my current organization decided to go with Acunetix.

The initial setup was easy because we had a proper software team consisting of developers, database administrators, and application teams. With the help of the vendor, we were able to implement it successfully. It took approximately three to four months.

The implementation was carried out with the help of a consultant.

The cost is being handled by the procurement team, yet it is on the higher side, and there is a recommendation to reduce it.

I would generally recommend Acunetix to any organization in the IT-enabled sector. However, I have not worked for a non-IT organization, so I cannot comment on that.

I'd rate the solution nine out of ten.

We use the product for dynamic analysis. It also helps us to scan web applications. 

The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code. 

Acunetix needs to include agent analysis. 

I have been using the product for four years. 

I rate the tool's stability a nine out of ten. 

I rate Acunetix's scalability a seven out of ten. My company has five to four users. 

I rate the tool's deployment a nine out of ten. 

We have seen good ROI with the tool's use. 

Acunetix is good and helps to scan properly. I rate it a nine out of ten. 

We use the product for application security.

The tool's most valuable feature is performance.

Acunetix needs to improve its cost.

I have been using the product for a year.

The tool is stable.

Acunetix is scalable.

The tool's support is good.

Positive

I rate the product a nine out of ten.

We use the solution for the scanning of vulnerabilities like SQL injections. 

Acunetix needs to be dynamic with JavaScript code, unlike Netsparker which can scan complex agents. 

I have been working with the solution for three years. 

Acunetix is very stable. 

The solution is scalable if you use the cloud version. You will face limitations with RAM and processor on the desktop. 

We have not faced any issues to complain about. 

I have used Netsparker before. 

Acunetix is easy to install and took only two minutes to deploy. For desktop applications, you need to download an EXE file. Deployment over the cloud requires API. 

I would rate Acunetix an eight out of ten. I don't recommend it for dynamic websites. It is recommended for static pages. 

The solution is mostly used for vulnerability scanning purposes. 

I'm drawn to Information Security. I immediately look for security threats vulnerabilities. Therefore, the report generation, the reports that are being monitored are great in that they were very easy to read and understand. 

It's user-friendly and the language that they use is pretty good. 

Overall, the tool is very good in context. It's definitely helpful from a tech intelligence perspective and for identifying vulnerabilities. I like that we can sort the vulnerabilities based on severity levels. 

The initial setup is easy.

There is a lot of documentation on their website which makes setting it up and using it quite simple.

Technical support is available 24/7.

Normally, the product asks for the URL address before scanning a certain application. Acunetix is immediately used for web application scanning purposes for vulnerability assessment. However, it doesn't seem very helpful or useful for scanning web services, and that has what I feel that the organization could work better on that.

The pricing is a bit on the higher side.

I've been using the solution for about two years at this point.

The solution is very stable. There are no bugs or glitches. It doesn't crash or freeze. it's reliable. 

The solution is scalable in the sense that it can be easily migrated.

We have about 50 to 55 users on the solution currently.

Technical support is fine. Whenever we have any queries the support is available. We have the paid version. We have paid for it, however, it's great due to the fact that it's available 24/7.

Although we are working with Acunetix, we are planning to migrate to Nessus in the future. We used Nessus around seven or so years ago. The current solution is a good one, however, my organization wants to try a new, different product. That is the reason we now moving to Nessus.

The initial setup is not overly complex or difficult. It's very straightforward and very easy. On their website, they have lots of documentation that walks you through the process. 

For deployment or maintenance, you only need a maximum of four or five people.

We do pay extra for technical support, however, it's 24/7 support which means we always have access to them if we need them.

The pricing is on the higher side. That could be okay for certain organizations. That said, if they could lower it, that would be ideal. Yeah. To me, it actually all depends upon the companies. My organization is not too big, and we're using it for managing a small set of people. If I have to spend much more, it wouldn't make any sense. 

We are into telecommunications, we have bought this product from the vendors.

We're using the latest version of the solution. We try to only use the most up-to-date option.

Overall, the tool is efficient enough to identify and track your vulnerabilities and it's good for intelligence scanning purposes. I'd advise users to just be cautious while the installation happens in terms of what logins are included and what are missing. 

The main thing is that users have to define their scope and objectives and only on the basis of that will the tool work. 

That said, you always have choices in the market - if this one does not fit your needs.

I'd rate the solution at a seven out of ten.