

HCL AppScan and Acunetix compete in the application security market. HCL AppScan has an edge due to its robust support and cost-effectiveness, whereas Acunetix stands out with its feature comprehensiveness.
Features: HCL AppScan offers extensive integration capabilities, detailed security analysis, and strong support. Acunetix provides accurate scanning, a wide vulnerability coverage, and quick results.
Room for Improvement: HCL AppScan could enhance scan speed, workflow intuitiveness, and integration features. Acunetix might improve scalability, proactive integrations, and user interface.
Ease of Deployment and Customer Service: HCL AppScan has streamlined deployment and reliable customer support. Acunetix provides both cloud and on-premise solutions with responsive assistance.
Pricing and ROI: HCL AppScan is cost-effective with compelling ROI due to low setup costs. Acunetix offers high ROI justifying its higher initial costs with its features.
It saves a significant amount of time by covering attack surfaces.
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
I have seen a return on investment with Acunetix, including time saved and cost reduction, because it provides us threats on our web application servers.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
The technical support from Invicti is very good and fast.
Support staff not being familiar with the problem.
Veracode provides excellent assistance and regularly scheduled calls to address customer concerns and updates.
There is still room for improvement when it comes to the speed of response.
Acunetix can handle increasing workloads and more applications easily.
Acunetix's scalability for my growing needs is great; it is a very scalable product compared to others.
I did not need to reach customer support because the product is very stable.
Since we've been using HCL AppScan for about three months, we really have not encountered a false positive.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
I believe Acunetix can improve customer support, as the dedicated support staff are often unfamiliar with problems and troubleshooting, leading to communication gaps that delay issue resolution.
If I'm scanning a web application, it shows me the various components being used. It tells me whether I have Java libraries, .NET frameworks, or other log management libraries such as Log4j, and what versions of those specific components are present.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
We secured a special licensing model for penetration testing companies, which is cost-effective.
The pricing of Acunetix is pretty expensive and could be improved.
Companies often choose based on budget constraints, with Veracode being on the higher end cost-wise.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
AppScan's most valuable features include its ability to identify vulnerabilities accurately, provide detailed remediation steps, and the newly introduced AI-powered features that enhance its functionality further.
I have utilized its interactive application security testing, as well as both static application security testing, dynamic application security testing, and IAST.
| Product | Market Share (%) |
|---|---|
| Acunetix | 2.3% |
| HCL AppScan | 2.3% |
| Other | 95.4% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 7 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 14 |
| Midsize Enterprise | 6 |
| Large Enterprise | 31 |
Acunetix Web Vulnerability Scanner is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross site scripting, and other exploitable vulnerabilities.
IBM Security AppScan enhances web application security and mobile application security, improves application security program management and strengthens regulatory compliance. By scanning your web and mobile applications prior to deployment, AppScan enables you to identify security vulnerabilities and generate reports and fix recommendations.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.