

GitGuardian and Acunetix compete in the arena of security and vulnerability management. GitGuardian appears to have the upper hand in secret detection due to its high accuracy and low false positives, while Acunetix is known for its comprehensive reporting and scanning capabilities.
Features: GitGuardian offers automatic detection tools, proactive notifications for potential breaches, and comprehensive integrations for immediate response. Acunetix provides detailed reporting, handles login sequences effectively, and has robust scheduling features that streamline vulnerability assessments.
Room for Improvement: Acunetix can enhance by reducing false positives, expanding manual re-testing, and offering a flexible licensing model. It could also benefit from improved mobile app scanning integration. GitGuardian could optimize its integration features, refine user management processes, and offer more detailed developer instructions coupled with better historical scan functionalities.
Ease of Deployment and Customer Service: Acunetix supports both on-premises and hybrid cloud deployments, receiving positive but sometimes criticized feedback for technical support delays. GitGuardian, with a cloud-centric approach, is praised for efficiency in deploying across public clouds but also faces challenges in technical support response times.
Pricing and ROI: Acunetix has faced customer dissatisfaction due to increased pricing and its complexity, suggesting a need for clear ROI justification. GitGuardian, although perceived as expensive, is viewed as cost-effective due to its efficient secrets detection that matches enterprise budgets. Both offer good ROI, but Acunetix's recent price hikes have caused user concern.
It saves a significant amount of time by covering attack surfaces.
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
I can certainly say that we have saved significant time and resources in terms of people and automation.
Ninety percent of exposed secrets caught at the commit or PR stage, significantly reducing the risk of them reaching production.
The majority of our incidents for critical detectors and important secret types are remediated automatically or proactively by developers through GitGuardian's notification system, without security team involvement.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
The technical support from Invicti is very good and fast.
Support staff not being familiar with the problem.
It effectively helps us with credentials security and has been performing satisfactorily.
I would rate their technical support a nine out of ten.
I would rate the technical support as excellent.
Acunetix can handle increasing workloads and more applications easily.
Our experience shows that we were able to onboard multiple repositories and integrate it across different teams without performance degradation.
In terms of scalability, I would rate it around a ten out of ten, as it handles all the repositories and commit activity we have.
I would rate it a ten out of ten for scalability.
It is stable because when I push changes, it scans immediately, confirming fixes.
We did not face frequent downtime or disruptions in its core services, such as secret detection or CI/CD scanning.
We set up a lot of the repository, so GitGuardian is a required check.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
I could supply it with maybe a Swagger file or a JSON file, and Acunetix would pick it up, scan all the endpoints according to the OWASP Top Ten, and give me remediation and actionable remediation reports.
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
Better customization and control over detection rules would help, as real-world projects often require defining custom patterns or adjusting sensitivity levels based on specific use cases.
Another thing that would be good to see is some more metrics on the usage of the GitGuardian pre-push hooks.
The self-healing activity by developers isn't reflected in the analytics, requiring us to collect this data ourselves.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
We secured a special licensing model for penetration testing companies, which is cost-effective.
The pricing of Acunetix is pretty expensive and could be improved.
Overall, the secret detection sector is expensive, but we are happy with the value we get.
It's fairly priced, as it performs a lot of analysis and is a valuable tool.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
One of the best features of the solution is the ability to use pre-push hooks.
A high number of our exposures are remediated by developers before security needs to step in, as the self-healing playbook process engages them automatically.
GitGuardian Platform performs the capability to detect secrets in real time exceptionally, as it activates from the commit and can detect it immediately.
| Product | Mindshare (%) |
|---|---|
| GitGuardian Platform | 1.6% |
| Acunetix | 2.3% |
| Other | 96.1% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 7 |
| Large Enterprise | 18 |
| Company Size | Count |
|---|---|
| Small Business | 13 |
| Midsize Enterprise | 9 |
| Large Enterprise | 18 |
Acunetix is a dynamic application security tool used globally for web application vulnerability scanning, focusing on SQL injection and cross-site scripting.
Acunetix provides a comprehensive web vulnerability assessment platform designed for identifying and remediating security threats. Users benefit from its ability to schedule scans, boasting a fast detection rate for common vulnerabilities. The tool's centralized dashboard helps organizations with compliance monitoring and features such as crawling and login sequence enhancements, contributing depth to its security assessments. Despite high praise for its integration capabilities and automated scanning that saves time, pricing and false positives present challenges. Organizations often use Acunetix to maintain internal security and evaluate pre-release environments.
What are Acunetix's main features?In industries like finance, healthcare, and technology, Acunetix assists in protecting sensitive data through robust scanning and reporting capabilities. Its ability to perform dynamic assessments makes it a chosen tool in regulatory environments and development settings, offering both internal security inspections and pre-release evaluations.
GitGuardian is a comprehensive platform focused on enhancing Non-Human Identity security by integrating Secrets Security and Secrets Observability to detect and manage secrets across development environments.
As cybersecurity threats increasingly target NHIs like service accounts and applications, GitGuardian offers a robust solution by supporting over 450 types of secrets and deploying honeytokens for additional defense. Trusted by leading organizations and developers, its monitoring and quick alert system enable effective detection and management of sensitive data, strengthening operational security across platforms.
What are the key features of GitGuardian?
What benefits and ROI should companies consider?
In the tech industry, GitGuardian is employed to safeguard APIs and sensitive credentials across code repositories like GitHub. Companies benefit from instant alerts and integrations with tools like Slack, effectively managing risks and enhancing security policies. While popular in sectors dependent on development agility, there is room for further improvement in customization and integration to meet specific industry needs.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.