Try our new research platform with insights from 80,000+ expert users

Acunetix pros and cons

Vendor: Invicti

3.9 out of 5

38 reviews
88% willing to recommend

Pros & Cons summary

Acunetix delivers active technical support and excellently scans vulnerabilities, including SQL injection and cross-site scripting. Offering automated assessments and CI/CD integrations, it enhances efficiency and supports a shift-left approach. Despite offering valuable PCI DSS reports, users face password reset challenges without admin access and licensing limitations. Integration capabilities need improvement, especially with tools like JIRA and Jenkins. Some users find the pricing high and report handling and customization of false positives could improve.

Buyer's Guide

Get pricing advice, tips, use cases and valuable features from real users of this product.

Prominent pros & cons

PROS

Acunetix provides active technical support, ensuring quick responses to issues.

It efficiently scans vulnerabilities, aiding quick identification and resolution of security weaknesses like SQL injection and cross-site scripting.

Acunetix reduces time and effort through automated assessments and integrations with CI/CD tools, supporting a shift-left approach.

It offers valuable reports such as PCI DSS scoring, aiding teams in understanding necessary fixes and ensuring detailed compliance overviews with its centralized dashboard.

Acunetix helps organizations save time and costs by automating security checks across numerous applications, which is particularly beneficial for large-scale operations.

CONS

Users reported issues changing passwords unless accessing the administration account, creating challenges if credentials are forgotten.

The licensing model of Acunetix has become more restrictive over time, causing inconvenience for users who initially purchased under a different model.

Acunetix could benefit from enhanced integration capabilities, particularly with CI/CD processes involving tools like JIRA, Jenkins, and Chef, which other competitive tools offer.

Pricing remains a concern as multiple users have noted Acunetix is on the higher side, creating a barrier to accessibility.

There is a need for better handling of false positives and customizing reports to increase trust in findings and improve report utility.

Acunetix Pros review quotes

Senior Security Engineer at a media company with 1,001-5,000 employees

Feb 3, 2019

One of the features that I feel is groundbreaking, that I would like to see expanded on, is the IAS feature: The Interactive Application Security Testing module that gets loaded onto an application on a server, for more in-depth, granular findings. I think that is really neat. I haven't seen a lot of competitors doing that.

Read full review

Lead Information Security Engineer at a financial services firm with 1,001-5,000 employees

Feb 3, 2019

The most important feature is that it's a web-based graphical user interface. That is a great addition. Also, the ability to schedule scans is great.

Read full review

Security Engineer at a tech services company with 51-200 employees

Apr 3, 2019

Their technical support has been very active. If I have an issue, I can reach out to them and get an answer pretty quick.

Read full review

Free Report: Acunetix Reviews and More

Learn what your peers think about Acunetix. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.

881,082 professionals have used our research since 2012.

Senior Security Engineer at a insurance company with 10,001+ employees

Apr 8, 2019

We are able to create a report which shows the PCI DSS scoring and share it with the application teams. Then, they can correlate and see exactly what they need to fix, and why.

Read full review

Manager for Technology Services at a educational organization with 5,001-10,000 employees

Aug 6, 2019

The vulnerability scanning option for analyzing the security loopholes on the websites is the most valuable feature of this solution.

Read full review

reviewer1155117

Works at a educational organization with 501-1,000 employees

Aug 10, 2019

The automated approach to these repetitive discovery attempts would take days to do manually and therefore it helps reduce the time needed to do an assessment.

Read full review

reviewer1218672

IT Manager at a financial services firm with 1,001-5,000 employees

Nov 17, 2019

Our developers can run the attacks directly from their environments, desktops.

Read full review

LB

Letsogile-Baloi

CEO at IMART OFFICE CONSULTANTS

Feb 6, 2020

It can operate both as a standalone and it can be integrated with other applications, which makes it a very versatile solution to have.

Read full review

CL

Cyber Security Associate at a consultancy with 10,001+ employees

Mar 3, 2020

For us, the most valuable aspect of the solution is the log-sequence feature.

Read full review

LB

Letsogile-Baloi

CEO at IMART OFFICE CONSULTANTS

Mar 9, 2020

The scalability is good. The scalability is more than good because it can operate both as a standalone and it can be integrated as part of applications. So that really makes it a very, very versatile solution to have.

Read full review

Show 10 more reviews (out of 36)

Acunetix Cons review quotes

Senior Security Engineer at a media company with 1,001-5,000 employees

Feb 3, 2019

Integration into other tools is very limited for Acunetix. While we're trying to incorporate a CI/CD process where we're integrating with JIRA and we're integrating with Jenkins and Chef, it becomes problematic. Other tools give you a high integration capability to connect into different solutions that you may already have, like JIRA.

Read full review

Lead Information Security Engineer at a financial services firm with 1,001-5,000 employees

Feb 3, 2019

It should be easier to recreate something manually, with the manual tool, because Acunetix is an automatic tool. If it finds something, it should be easier to manually replicate it. Sometimes you don't get the raw data from the input and output, so that could be improved.

Read full review

Security Engineer at a tech services company with 51-200 employees

Apr 3, 2019

You can't actually change your password after you've set it unless you go back into the administration account and you change it there. Thus, if you're locked out and don't remember your password, that's a thing.

Read full review

Free Report: Acunetix Reviews and More

Learn what your peers think about Acunetix. Get advice and tips from experienced pros sharing their opinions. Updated: January 2026.

881,082 professionals have used our research since 2012.

Senior Security Engineer at a insurance company with 10,001+ employees

Apr 8, 2019

We have had issues during upgrades where their scans worked on some apps better with previous versions. Then, we had to work with their tech support, who were great, to get it fixed for the next version.

Read full review

Manager for Technology Services at a educational organization with 5,001-10,000 employees

Aug 6, 2019

In terms of what needs improvement, the way the licensing model is currently is not very convenient for us because initially, when we bought it, the licensing model was very flexible, but now it restricts us.

Read full review

reviewer1155117

Works at a educational organization with 501-1,000 employees

Aug 10, 2019

It would be nice to have a feature to "retest" only a single vulnerability that the customer reports as patched, and delete it from the next scans since it has already been patched.

Read full review

reviewer1218672

IT Manager at a financial services firm with 1,001-5,000 employees

Nov 17, 2019

Tools that would allow us to work more efficiently with the mobile environment, with Android and iOS.

Read full review

LB

Letsogile-Baloi

CEO at IMART OFFICE CONSULTANTS

Feb 6, 2020

When monitoring the traffic we always have issues with the bandwidth consumption and the throttling of traffic.

Read full review

CL

Cyber Security Associate at a consultancy with 10,001+ employees

Mar 3, 2020

The solution limits the number of scans. It would be much better if we could have unlimited scans.

Read full review

LB

Letsogile-Baloi

CEO at IMART OFFICE CONSULTANTS

Mar 9, 2020

We want to see how much bandwidth usage it consumes. When we monitor traffic we have issues with the consumption and throttling of the traffic.

Read full review

Show 10 more reviews (out of 36)

Related questions

137

If you had to both encrypt and compress data during transmission, which would you do first and why?

44

When evaluating Application Security, what aspect do you think is the most important to look for?

101

What are the Top 5 cybersecurity trends in 2022?

128

What are the threats associated with using ‘bogus’ cybersecurity tools?

54

We're evaluating Tripwire, what else should we consider?

39

Which application security solutions include both vulnerability scans and quality checks?

393

Is SonarQube the best tool for static analysis?

39

Why Do I Need Application Security Software?

77

Which Email Security enterprise solution would you choose: Cisco Secure Email vs Forcepoint Email Security vs Barracuda Email Security Gateway?

38

SAST vs. DAST: Which is better for application security testing?