CAST Application Intelligence Platform vs Invicti Web + API comparison

Why PeerSpot?

The compared CAST and Invicti solutions aren't in the same category. CAST is ranked #5 in SDA , and holds a 12.7% mindshare in the category. Invicti is ranked #13 in AS , with an average rating of 7.8, and holds a 2.6% mindshare. Additionally, 83% of CAST users are willing to recommend the solution, compared to 89% of Invicti users who would recommend it.

CAST Application Intelligen...

Read 4 CAST Application Intelligence Platform reviews

1,522 Views
776 Comparison Views

83% willing to recommend

Invicti Web + API

Read 37 Invicti Web + API reviews

13,849 Views
6,509 Comparison Views

89% willing to recommend

CAST Application Intelligen...

Invicti Web + API

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Application Intelligence Platform and Invicti Web + API based on real PeerSpot user reviews.

Find out what your peers are saying about SonarSource Sàrl, Jellyfish, LinearB and others in Software Development Analytics.

To learn more, read our detailed Software Development Analytics Report (Updated: October 2026).

Buyer's Guide

Software Development Analytics

October 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CAST Application Intelligen...

Average Rating

7.0

Reviews Sentiment

8.0

Number of Reviews

Ranking in other categories

Software Development Analytics (5th)

Invicti Web + API

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Application Security Tools (13th), Static Application Security Testing (SAST) (9th), Vulnerability Management (29th), DevSecOps (7th)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. CAST Application Intelligence Platform is designed for Software Development Analytics and holds a mindshare of 12.7%, down 23.7% compared to last year.
Invicti Web + API, on the other hand, focuses on Application Security Tools, holds 2.6% mindshare, up 2.4% since last year.

Software Development Analytics Mindshare Distribution
Product	Mindshare (%)
CAST Application Intelligence Platform	12.7%
SonarQube	19.0%
LinearB	15.7%
Other	52.6%

Software Development Analytics

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Invicti Web + API	2.6%
SonarQube	10.2%
Checkmarx One	6.8%
Other	80.4%

Application Security Tools

Featured Reviews

Vishal-Goyal

Chief Architect at Persistent Systems

Has a security dashboard that's helpful because it gives compliance checks based on some of the leading frameworks in the industry

The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all. For example, 2022 CWE coverage is still not available in the CAST Application Intelligence Platform. The solution also covers some NIST rules, but it does not cater to all rules. An additional feature I'd like to see in the next update of the CAST Application Intelligence Platform is for it to provide source code developer and contributor details, especially information on which areas of code were touched. This would be a good insight as the CAST Application Intelligence Platform looks into the source code.

Read full review

Rahul Kumar

Senior Engineer - Penetration Tester at a government with 10,001+ employees

Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports

The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The most valuable feature of the CAST Application Intelligence Platform is its security dashboard which is a dedicated dashboard that's pretty helpful because it gives compliance checks based on some of the leading frameworks in the industry, such as ISO 5055, OWASP, CWE Top 25, and NIST security guidelines. I find the security dashboard of the solution and the information it provides pretty useful. The security dashboard of the CAST Application Intelligence Platform is a feature that stands out."

"We've seen ROI from CAST Application Intelligence Platform because we've been able to leverage it for doing multiple customer engagements and we've been able to win more business for our organization by leveraging the product."

"Our clients use CAST Highlight for cloud migration. This allows them to remove or remediate the blockers which are highlighted. This part of the solution shows improvement in quality and captures feedback for our clients."

"It supports most programming languages."

"CAST's risk and security flow detection capabilities are highly effective, particularly in identifying security vulnerabilities. It is one of the most important and valuable features of the platform."

"Hourly, daily, and monthly static code analysis before making a project live, therefore controlling the technical debt and code quality."

"Used for controlling the technical debt and code quality."

"The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities."

"Our developers can run the attacks directly from their environments, desktops."

"Acunetix gives us code-level identification of vulnerabilities and a good understanding of the code-level vulnerability fixes, which is much more helpful for us because we can understand how to fix the vulnerabilities at the code level."

"I haven't seen reporting of that level in any other tool."

"The most important feature is that it's a web-based graphical user interface. That is a great addition. Also, the ability to schedule scans is great."

"The automated approach to these repetitive discovery attempts would take days to do manually and therefore it helps reduce the time needed to do an assessment."

"The usability and overall scan results are good."

"Acunetix is the best service in the world. It is easy to manage. It gives a lot of information to the users to see and identify problems in their site or applications. It works very well."

More Invicti Web + API pros

Cons

"It has very few plugins to access different code repositories, so source code has to be fed."

"Implementation could be made more simpler as it is complex."

"The integration of this solution could be improved."

"The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all."

"Areas for improvement in CAST AIP include enhancing support for implementation in complex environments and improving technical support to address organizational challenges alongside engineering issues."

"The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all. For example, 2022 CWE coverage is still not available in the CAST Application Intelligence Platform. The solution also covers some NIST rules, but it does not cater to all rules. An additional feature I'd like to see in the next update of the CAST Application Intelligence Platform is for it to provide source code developer and contributor details, especially information on which areas of code were touched. This would be a good insight as the CAST Application Intelligence Platform looks into the source code."

"There is room for improvement in the pricing."

"You can't actually change your password after you've set it unless you go back into the administration account and you change it there. Thus, if you're locked out and don't remember your password, that's a thing."

"Acunetix provides the benefit of saving time for an end user. I would not say it saves money because the cost and license of Acunetix is far more than what others offer."

"However, it doesn't seem very helpful or useful for scanning web services, and that has what I feel that the organization could work better on that."

"It would be nice to have a feature to "retest" only a single vulnerability that the customer reports as patched, and delete it from the next scans since it has already been patched."

"It should be easier to recreate something manually, with the manual tool, because Acunetix is an automatic tool. If it finds something, it should be easier to manually replicate it. Sometimes you don't get the raw data from the input and output, so that could be improved."

"I rate its stability six out of ten."

"We have had issues during upgrades where their scans worked on some apps better with previous versions. Then, we had to work with their tech support, who were great, to get it fixed for the next version."

More Invicti Web + API cons

Pricing and Cost Advice

"I do know how the CAST Application Intelligence Platform is licensed, but I'm not able to give the cost because the price is not listed. My company works with individual vendors, so pricing is on a case-to-case basis, but the vendors give specialized pricing because of the enterprise deployment, though my team is aware of product pricing based on lines of code, based on the number of applications, etc., I'm unable to give the exact licensing costs of the CAST Application Intelligence Platform. My company doesn't have to pay extra for some features or services because all are included as part of the enterprise license. On a scale of one to five, with five being very cheap and one being very expensive, I would rate the CAST Application Intelligence Platform as three out of five."

"Acunetix was around the same price as all the other vendors we looked at, nothing special."

"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."

"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."

"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."

"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."

"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."

"The pricing is a little high, and moreover, it's kind of domain-based."

"The price is exceptionally high."

More Invicti Web + API pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Development Analytics solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Outsourcing Company

16%

Construction Company

10%

Government

Manufacturing Company

12%

Comms Service Provider

11%

Financial Services Firm

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	7
Large Enterprise	19

Questions from the Community

Ask a question

Earn 20 points

What is your primary use case for Acunetix Vulnerability Scanner?

In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across network traffic. The main use cases usually fall into a few core areas, with primary...

See all answers

What advice do you have for others considering Acunetix Vulnerability Scanner?

I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The tool is powerful, but its effectiveness depends heavily on how the authenticated ar...

See all answers

What is your experience regarding pricing and costs for Acunetix?

Everything is perfect and good, including the pricing and all related aspects.

See all answers

Comparisons

SonarQube vs CAST Application Intelligence Platform

Compared 26% of the time

Veracode vs CAST Application Intelligence Platform

Compared 11% of the time

OpenText Core Application Security vs CAST Application Intelligence Platform

Compared 10% of the time

Seerene vs CAST Application Intelligence Platform

Compared 8% of the time

More CAST Application Intelligence Platform Competitors

PortSwigger Burp Suite Professional vs Invicti Web + API

Compared 6% of the time

OpenText Dynamic Application Security Testing vs Invicti Web + API

Compared 5% of the time

OWASP Zap vs Invicti Web + API

Compared 4% of the time

Checkmarx One vs Invicti Web + API

Compared 3% of the time

HCL AppScan vs Invicti Web + API

Compared 3% of the time

More Invicti Web + API Competitors

Product Reports

Buyer's Guide

Software Development Analytics

October 2026

CAST Application Intelligence Platform report

Download CAST Application Intelligence Platform product report

Buyer's Guide

Invicti Web + API

October 2026

Download Invicti Web + API product report

Also Known As

CAST AIP

AcuSensor

Overview

CAST Application Intelligence Platform is a leading software analysis and measurement system designed to support advanced IT strategies. It provides comprehensive insights into software structure, performance, and security, aiding developers and IT leaders in effective decision-making.

CAST Application Intelligence Platform offers a robust solution for understanding complex software ecosystems. By automating application analytics, it accelerates the identification of software issues, reducing the technical debt and improving code quality. The platform is particularly useful for legacy system modernization, cloud migration initiatives, and enhancing application stability and scalability.

What are the key features of CAST Application Intelligence Platform?

Automated Analysis: Provides deep insights without manual intervention.
Code Quality Assessment: Enhances code reliability and security.
Technical Debt Measurement: Identifies and reduces associated costs.
Cloud Readiness: Evaluates applications for seamless cloud transition.

What benefits should be considered in reviews?

Improved Developer Efficiency: Boosts productivity through automated workflows.
Cost Reduction: Minimizes expenses related to software maintenance.
Risk Mitigation: Reduces vulnerabilities with insightful security assessments.
Enhanced Decision Making: Supports strategic IT planning with precise data.

CAST Application Intelligence Platform is heavily utilized in industries like finance, healthcare, and retail, where software quality and security are critical. Implementing its solutions allows these sectors to modernize legacy systems, ensuring compliance and streamlining operations through reliable software architecture evaluation.

CAST

Acunetix is a robust web application security testing tool offering rapid scanning, user-friendly interfaces, and accurate vulnerability detection with minimal false positives. It supports both cloud and on-premises deployment, making it versatile for various security needs.

Acunetix is distinguished by its capability to identify critical vulnerabilities such as cross-site scripting and SQL injection with high precision. It integrates seamlessly with CI/CD tools, supporting continuous scanning and large-scale application management. The centralized dashboard and detailed automated reporting streamline operations. Despite its benefits, users suggest improvements like reducing false positives, flexible pricing, and enhanced API scanning. Better integration with platforms like GitHub and Azure DevOps is sought, alongside more comprehensive customization and faster scanning. Mobile application scanning and improved team collaboration tools are also desired.

What features make Acunetix stand out?

Rapid Scanning: Delivers fast and comprehensive security assessments.
User-Friendliness: Intuitive interface simplifies operations for diverse teams.
Detailed Reporting: Automated reports enhance vulnerability management.
High Accuracy: Detects vulnerabilities with minimal false positives.
CI/CD Integration: Seamless integration supports continuous development processes.

What benefits should users consider when evaluating?

Vulnerability Detection: Critical for identifying potential security threats efficiently.
Flexibility: Supports both cloud and on-premises environments.
Compliance Support: Aids in meeting standards like PCI DSS.
Scalability: Capable of handling large-scale web applications.

Acunetix is widely implemented across industries undertaking web application security assessments, including those requiring penetration testing and vulnerability assessment. It ensures applications meet security protocols and complies with standards while fitting into CI/CD workflows for secure pre-release checks.

Invicti

Sample Customers

Steria, T-Systems MMS, Atos Origin, Accenture, Capgemini

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Buyer's Guide

Software Development Analytics

October 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Jellyfish, LinearB and others in Software Development Analytics. Updated: October 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

We monitor all Software Development Analytics reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.