

Acunetix and Qualys TotalCloud compete in the field of cybersecurity solutions, with each product offering specific strengths in their respective focus areas. Acunetix appears to have an edge in vulnerability detection for web applications, while Qualys TotalCloud holds an advantage in cloud security with real-time risk prioritization.
Features: Acunetix is known for fast scanning capabilities across various domains, flexible deployment options, and the ability to generate user-friendly reports. It effectively reduces false positives and integrates with CI/CD tools. Qualys TotalCloud is proficient in cloud and container security, offering detailed inventory and monitoring capabilities, along with comprehensive risk assessments integrated into CI/CD pipelines.
Room for Improvement: Acunetix could enhance false positive management, allow more customization in reporting, and add automated scanning of subdomains. Its licensing and pricing are considered expensive by some users. Qualys TotalCloud needs to improve user interface navigation, expand integration with additional tools, and add automated subdomain detection for a more complete vulnerability assessment. Its cost is also a point of concern for some users.
Ease of Deployment and Customer Service: Acunetix offers flexible deployment options, supporting on-premises and hybrid models. Its technical support is generally responsive, yet some users wish for faster resolution times. Qualys TotalCloud supports a wide range of deployment options, including public and private cloud environments. While customer service is accessible, users feel it could benefit from improved navigation and more intuitive reporting dashboards.
Pricing and ROI: Acunetix is perceived as costly, with a pricing model that some find inflexible due to domain-based licensing. Nonetheless, many users report a positive ROI from reduced manual effort and enhanced security. Similarly, Qualys TotalCloud is on the high end of the pricing scale, but its comprehensive features justify the cost, reflected in improved security processes and cost-effectiveness, particularly for larger enterprises.
It saves a significant amount of time by covering attack surfaces.
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
The time needed to complete an assessment is one-third of what it would take for a security assessment because we don't have much manual assessment involved now that we have added automated assessment.
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
It has saved about 90% of our time.
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
The technical support from Invicti is very good and fast.
Support staff not being familiar with the problem.
On a scale from one to ten, I would rate customer support a ten.
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
The technical support team is strong and helpful in solving issues promptly.
Acunetix can handle increasing workloads and more applications easily.
Invicti Web + API handles growth well, as it scales up easily with more users or more applications to test.
I would rate its scalability a ten out of ten.
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
For scalability, I would rate it a ten out of ten.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
I would rate it a ten out of ten for stability.
We have not encountered any lagging or crashing from the tool.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
I could supply it with maybe a Swagger file or a JSON file, and Acunetix would pick it up, scan all the endpoints according to the OWASP Top Ten, and give me remediation and actionable remediation reports.
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
We secured a special licensing model for penetration testing companies, which is cost-effective.
The pricing of Acunetix is pretty expensive and could be improved.
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
The AI enhancements simplify vulnerability management by eliminating the need for SQL queries to create policies.
For example, if some machines have open vulnerabilities and the remediation team resolves them, the on-demand feature allows us to verify vulnerability resolution promptly.
Qualys TotalCloud is also used to provide unified vulnerability and threat assessment across both IaaS and SaaS.
| Product | Mindshare (%) |
|---|---|
| Qualys TotalCloud | 1.2% |
| Invicti Web + API | 1.3% |
| Other | 97.5% |

| Company Size | Count |
|---|---|
| Small Business | 18 |
| Midsize Enterprise | 7 |
| Large Enterprise | 19 |
| Company Size | Count |
|---|---|
| Small Business | 16 |
| Midsize Enterprise | 11 |
| Large Enterprise | 39 |
Acunetix is a robust web application security testing tool offering rapid scanning, user-friendly interfaces, and accurate vulnerability detection with minimal false positives. It supports both cloud and on-premises deployment, making it versatile for various security needs.
Acunetix is distinguished by its capability to identify critical vulnerabilities such as cross-site scripting and SQL injection with high precision. It integrates seamlessly with CI/CD tools, supporting continuous scanning and large-scale application management. The centralized dashboard and detailed automated reporting streamline operations. Despite its benefits, users suggest improvements like reducing false positives, flexible pricing, and enhanced API scanning. Better integration with platforms like GitHub and Azure DevOps is sought, alongside more comprehensive customization and faster scanning. Mobile application scanning and improved team collaboration tools are also desired.
What features make Acunetix stand out?Acunetix is widely implemented across industries undertaking web application security assessments, including those requiring penetration testing and vulnerability assessment. It ensures applications meet security protocols and complies with standards while fitting into CI/CD workflows for secure pre-release checks.
Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.
Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.
What are the most important features of Qualys TotalCloud?Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.
We monitor all Vulnerability Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.