No more typing reviews! Try our Samantha, our new voice AI agent.

CompassOne by Blackpoint Cyber vs Invicti Web + API comparison

Why PeerSpot?
Sponsored
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Qualys TotalCloud
Sponsored
Ranking in Vulnerability Management
5th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
55
Ranking in other categories
Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
CompassOne by Blackpoint Cyber
Ranking in Vulnerability Management
48th
Average Rating
9.0
Reviews Sentiment
7.8
Number of Reviews
5
Ranking in other categories
Security Information and Event Management (SIEM) (35th), Endpoint Detection and Response (EDR) (36th), Application Control (10th), Managed Detection and Response (MDR) (12th), Identity Threat Detection and Response (ITDR) (17th)
Invicti Web + API
Ranking in Vulnerability Management
29th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
37
Ranking in other categories
Application Security Tools (13th), Static Application Security Testing (SAST) (9th), DevSecOps (7th)
 

Mindshare comparison

As of November 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. The mindshare of CompassOne by Blackpoint Cyber is 0.5%, up from 0.0% compared to the previous year. The mindshare of Invicti Web + API is 1.3%, up from 1.1% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
Invicti Web + API1.3%
CompassOne by Blackpoint Cyber0.5%
Other97.0%
Vulnerability Management
 

Featured Reviews

reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
Gary Herbstman - PeerSpot reviewer
Owner at Byte Solutions Inc.
Experienced reduced alert fatigue with streamlined notifications
We use Blackpoint Cyber MDR for our higher-end clients who need a higher level of control over security We get a deeper look into security related events that are otherwise difficult find and analyze. Security operations does a good job of weeding out the noise. I appreciate that there are…
Rahul Kumar - PeerSpot reviewer
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"I like the web API security and IoT scanning features the most. The user-friendly design of TotalCloud's interface enables customers to navigate it and use its full potential easily"
"Qualys TotalCloud has helped us view our risk structure, vulnerabilities, and security posture."
"The most valuable feature is extensibility."
"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."
"Multi-cloud visibility saves time and makes things easier, as we can also have comparability to see what configuration differences have been made from cloud to cloud."
"The most valuable feature is the consolidated information that it provides from various platforms."
"Qualys TotalCloud is overall the best tool available in the market for scanning purposes."
"One of Qualys' best features is its categorization, which allows us to see the types of assets, their security postures, and the AI-powered version of the tool."
"Their SOC is phenomenal in not monitoring and responding and taking action."
"I appreciate that there are people behind the scenes sorting out valuable alerts from those that are not, so I only get alerts when they are real."
"On my end, the most valuable feature of this solution is that I can install it and forget about it. After that, their SOC team takes over and they only call me when there's a problem."
"The solution also watches over Microsoft 365 and keeps a copy of logs."
"On a scale from one to ten, I would rate the overall solution as a ten."
"The solution is all encompassing and can incorporate email monitoring."
"The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities."
"The most important element for us is that it's very easy for developers to use, as they don't need to have any knowledge about security or threats; they just run the tool against their application and get the results."
"The solution is paying for itself, as our applications are more secure."
"The vulnerability scanning option for analyzing the security loopholes on the websites is the most valuable feature of this solution."
"It's a very easy deployment and easy application."
"Picks up weaknesses in our app setups."
"The features of Acunetix have proved most effective in identifying vulnerabilities."
"The UI of Invicti Web + API is very friendly, making it one of the best DAST tools I have used, as we don't have much difficulty using it and it is quite stable."
 

Cons

"To be honest, I would move out from this tool because it does not give a full view of vulnerability."
"The support process is inefficient due to the excessive number of replies required when submitting tickets."
"Although TotalCloud is a helpful tool, some of its advanced features are still under development."
"There is a lack of data segregation according to criticality or inventory."
"One of the things that could be improved is the alerts. Qualys is a fantastic tool, especially with the TruRisk feature, but one challenge that most leaders face involves alert fatigue."
"I didn't give it a ten because I would like to see simpler configuration, more customizable dashboards, and better automation and integration options."
"It has been working very well, but it would be helpful if the dashboard could generate reports tailored to specific compliance needs. For example, in India, we have to comply with RBI and SEBI guidelines. It w"
"Qualys TotalCloud has some features where reports have limitations for downloading."
"The solution does not tie into other EDR products like CyberArk or CrowdStrike but that might be more useful."
"The interface could be more intuitive. More transparency is needed in the interface as a lot of details are hidden behind the scenes, making them difficult or impossible to access."
"While I am very satisfied with the service, supporting additional platforms, particularly Linux support, would be a beneficial improvement."
"Some texts seem to report items as normal too quickly."
"The feature we keep asking for is a vulnerability scan."
"The interface could be more intuitive."
"Acunetix needs to improve its cost."
"The time to fix issues is not too quick, so in the case of time-restricted projects for some customers, this might become a problem."
"The solution limits the number of scans. It would be much better if we could have unlimited scans."
"I believe Invicti Web + API can find some improvements such as customization."
"We want to see how much bandwidth usage it consumes. When we monitor traffic we have issues with the consumption and throttling of the traffic."
"The only problem that they have is the price. It is a bit expensive, and you cannot change the number of applications for the whole year."
"There are some versions of the solution that are not as stable as others."
"Tool is quite expensive though compared to other tools."
 

Pricing and Cost Advice

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."
"TotalCloud's price is about right where I would expect it to be."
"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."
"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."
"The cost is high, but it meets our organizational needs."
"Although Qualys TotalCloud is relatively expensive due to its unique automation features, its cost-effectiveness is rated an eight out of ten, with ten being the most costly."
"Its price seems higher compared to other tools, but it is worth it. If they could adjust the pricing and make it comparable with other tools, that would be great."
"Qualys TotalCloud is expensive."
"The pricing is reasonable."
"The pricing is in line with other products."
"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."
"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."
"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."
"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."
"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."
"I would say that Acunetix is expensive because there are products on the market with similar features that are equally or better-priced."
"All things considered, I think it has a good price/value ratio."
"The costs aren't very expensive. It costs around $3000 or $4000."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
Outsourcing Company
11%
Comms Service Provider
9%
Financial Services Firm
9%
Computer Software Company
8%
Manufacturing Company
12%
Comms Service Provider
11%
Financial Services Firm
10%
Computer Software Company
8%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise39
No data available
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise7
Large Enterprise19
 

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. T...
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvem...
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific examp...
What needs improvement with Blackpoint Cyber MDR?
While I am very satisfied with the service, supporting additional platforms, particularly Linux support, would be a b...
What is your primary use case for Blackpoint Cyber MDR?
The solution serves as a baseline security offering. We have implemented it for every client that we do business with.
What is your primary use case for Acunetix Vulnerability Scanner?
In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across netw...
What advice do you have for others considering Acunetix Vulnerability Scanner?
I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The too...
What is your experience regarding pricing and costs for Acunetix?
Everything is perfect and good, including the pricing and all related aspects.
 

Also Known As

Qualys TotalCloud with FlexScan
Blackpoint Cyber Managed Detection + Response, Blackpoint Cyber Managed Detection and Response
AcuSensor
 

Overview

 

Sample Customers

Information Not Available
CoreRecon, Peerless Tech Solutions, Lorien Health
Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
Find out what your peers are saying about CompassOne by Blackpoint Cyber vs. Invicti Web + API and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.