No more typing reviews! Try our Samantha, our new voice AI agent.

Invicti Web + API vs Qualys TotalCloud comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 6, 2026

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
6.8
Invicti Web + API improves efficiency, reduces costs, and enhances security, offering excellent ROI and early threat detection.
Sentiment score
4.8
Organizations benefit from Qualys TotalCloud with improved efficiency, enhanced security, and substantial savings in time and resources.
It saves a significant amount of time by covering attack surfaces.
Information Security Engineer at Tübitak Bilgem
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
The time needed to complete an assessment is one-third of what it would take for a security assessment because we don't have much manual assessment involved now that we have added automated assessment.
Cybersecurity Consultant
We are able to scan all our assets with less human intervention and achieve overall effective outcomes.
Dns architect at a outsourcing company with 5,001-10,000 employees
It has saved about 90% of our time.
Senior Consultant at a consultancy with 10,001+ employees
TotalCloud has generated overall savings of 30 to 40 percent across various departments.
Security Manager at a consultancy with 10,001+ employees
 

Customer Service

Sentiment score
6.5
Invicti Web + API customer service is responsive and helpful, though some users experience delays during busy periods.
Sentiment score
6.7
Qualys TotalCloud delivers knowledgeable support with high ratings despite occasional delays, emphasizing personalized and effective problem-solving.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
Lead Cybersecurity at TBO
The technical support from Invicti is very good and fast.
Information Security Engineer at Tübitak Bilgem
Support staff not being familiar with the problem.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
On a scale from one to ten, I would rate customer support a ten.
Head of IT at a insurance company with 201-500 employees
The technical support from Qualys is excellent, always available 24/7 for any urgent needs.
Senior Consultant at a consultancy with 10,001+ employees
The technical support team is strong and helpful in solving issues promptly.
Security Manager at a consultancy with 10,001+ employees
 

Scalability Issues

Sentiment score
7.1
Invicti Web + API is praised for its scalability, adaptability, and efficient handling of multiple projects in enterprise environments.
Sentiment score
7.2
Qualys TotalCloud excels in scalability and multi-cloud support but faces occasional performance lags and management challenges.
Acunetix can handle increasing workloads and more applications easily.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Invicti Web + API handles growth well, as it scales up easily with more users or more applications to test.
Cybersecurity Consultant
I would rate its scalability a ten out of ten.
Senior Consultant at a consultancy with 10,001+ employees
The scalability of Qualys TotalCloud is excellent, and I would rate it as ten out of ten.
IT Architect at a consultancy with 10,001+ employees
For scalability, I would rate it a ten out of ten.
Cyber Security Specialist at a financial services firm with 10,001+ employees
 

Stability Issues

Sentiment score
8.2
Invicti Web + API is stable and reliable with minor upgrade issues, easy maintenance, and retains settings through updates.
Sentiment score
8.2
Qualys TotalCloud is praised for high stability, reliability, minimal downtime, advanced scanning, prompt support, and seamless user experience.
It has a lot of scanning mechanisms, which are agentless APIs, eBPF, and cloud agents, that are highly reliable.
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
I would rate it a ten out of ten for stability.
Senior Consultant at a consultancy with 10,001+ employees
We have not encountered any lagging or crashing from the tool.
Senior Information Security Engineer at a consultancy with 10,001+ employees
 

Room For Improvement

Invicti Web + API users seek improved accuracy, integration, and customization, along with faster scans and a streamlined interface.
Qualys TotalCloud needs UI/UX improvements, enhanced automation, better integration, clearer licensing, and faster vulnerability detection for competitiveness.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
Lead Cybersecurity at TBO
I could supply it with maybe a Swagger file or a JSON file, and Acunetix would pick it up, scan all the endpoints according to the OWASP Top Ten, and give me remediation and actionable remediation reports.
Team Lead, Application Security at a financial services firm with 5,001-10,000 employees
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
CEO at Xcelliti
Ideally, updates should be more immediate, enabling quicker implementation of solutions.
Project Lead at Persistent Systems
Our goal is to integrate all these functions into Qualys, creating a single dashboard for comprehensive security monitoring and management.
Senior Information Security Engineer at a consultancy with 10,001+ employees
If we find a critical or high vulnerability on an IP or server, the remediation steps should be communicated clearly.
Cyber Security Manager at RJ Corp Retail
 

Setup Cost

The pricing of Invicti Web + API is high but offers value, with discounts for specific market segments available.
Qualys TotalCloud offers competitive pricing and flexibility, especially for large enterprises, with quick setup and comprehensive integration.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
Lead Cybersecurity at TBO
We secured a special licensing model for penetration testing companies, which is cost-effective.
Information Security Engineer at Tübitak Bilgem
The pricing of Acunetix is pretty expensive and could be improved.
Senior Business Development Manager at Intouch World
In our case, replacing the tool will give us better functionalities without increasing the cost compared to what we pay today for the competitor.
Head of IT at a insurance company with 201-500 employees
Qualys TotalCloud offers good pricing that is affordable and competitive with the market.
Senior Consultant at a consultancy with 10,001+ employees
Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform.
IT Architect at a consultancy with 10,001+ employees
 

Valuable Features

Invicti Web + API offers efficient scanning, detailed reporting, accurate detection, and integrates smoothly with CI/CD for enhanced security.
Qualys TotalCloud optimizes cloud security with AI, enhanced risk management, and efficient threat detection across multi-cloud environments.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
Senior Business Development Manager at Intouch World
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
CEO at Xcelliti
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
The AI enhancements simplify vulnerability management by eliminating the need for SQL queries to create policies.
Project Lead at Persistent Systems
For example, if some machines have open vulnerabilities and the remediation team resolves them, the on-demand feature allows us to verify vulnerability resolution promptly.
Senior Security Consultant at CyberNxt Solutions LLP
Qualys TotalCloud is also used to provide unified vulnerability and threat assessment across both IaaS and SaaS.
Group IT Cloud and Cybersecurity Engineer at Safetykleen
 

Categories and Ranking

Invicti Web + API
Ranking in Vulnerability Management
29th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
37
Ranking in other categories
Application Security Tools (13th), Static Application Security Testing (SAST) (9th), DevSecOps (7th)
Qualys TotalCloud
Ranking in Vulnerability Management
5th
Average Rating
8.8
Reviews Sentiment
7.0
Number of Reviews
55
Ranking in other categories
Container Security (8th), Cloud Workload Protection Platforms (CWPP) (7th), Cloud Security Posture Management (CSPM) (6th), SaaS Security Posture Management (SSPM) (2nd), Cloud-Native Application Protection Platforms (CNAPP) (6th)
 

Mindshare comparison

As of November 2026, in the Vulnerability Management category, the mindshare of Invicti Web + API is 1.3%, up from 1.1% compared to the previous year. The mindshare of Qualys TotalCloud is 1.2%, up from 1.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management Mindshare Distribution
ProductMindshare (%)
Qualys TotalCloud1.2%
Invicti Web + API1.3%
Other97.5%
Vulnerability Management
 

Featured Reviews

Rahul Kumar - PeerSpot reviewer
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.
reviewer2859021 - PeerSpot reviewer
Sr Security Engineer at a tech vendor with 5,001-10,000 employees
Risk-based triage has transformed container security and now prioritizes high-impact threats
The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Manufacturing Company
12%
Comms Service Provider
11%
Financial Services Firm
10%
Computer Software Company
8%
Comms Service Provider
18%
Outsourcing Company
12%
Manufacturing Company
11%
Financial Services Firm
10%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business18
Midsize Enterprise7
Large Enterprise19
By reviewers
Company SizeCount
Small Business16
Midsize Enterprise11
Large Enterprise39
 

Questions from the Community

What is your primary use case for Acunetix Vulnerability Scanner?
In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across network traffic. The main use cases usually fall into a few core areas, with primary...
What advice do you have for others considering Acunetix Vulnerability Scanner?
I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The tool is powerful, but its effectiveness depends heavily on how the authenticated ar...
What is your experience regarding pricing and costs for Acunetix?
Everything is perfect and good, including the pricing and all related aspects.
What is your experience regarding pricing and costs for Qualys TotalCloud?
We purchased Qualys TotalCloud for GCP and Azure as well. It is comparatively better than others regarding pricing. The pricing is reasonable for Qualys TotalCloud without facing any challenges.
What needs improvement with Qualys TotalCloud?
I am unsure about how Qualys TotalCloud can be improved. I do not have anything else to add about the needed improvements, even if it is something small.
What is your primary use case for Qualys TotalCloud?
My main use case for Qualys TotalCloud is telemetry, although I am unsure about the specifics. A quick specific example of how I use Qualys TotalCloud for telemetry is to look at risk. I do not hav...
 

Also Known As

AcuSensor
Qualys TotalCloud with FlexScan
 

Overview

 

Sample Customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
Information Not Available
Find out what your peers are saying about Invicti Web + API vs. Qualys TotalCloud and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.