Acunetix vs IBM Guardium Vulnerability Assessment comparison

Acunetix vs. IBM Guardium Vulnerability Assessment

Download the complete report

Helped 900,644 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Mindshare comparison

As of June 2026, in the Vulnerability Management category, the mindshare of Qualys TotalCloud is 1.0%, up from 0.9% compared to the previous year. The mindshare of Acunetix is 1.2%, up from 1.2% compared to the previous year. The mindshare of IBM Guardium Vulnerability Assessment is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.

Vulnerability Management Mindshare Distribution
Product	Mindshare (%)
Qualys TotalCloud	1.0%
Acunetix	1.2%
IBM Guardium Vulnerability Assessment	0.7%
Other	97.1%

Vulnerability Management

Featured Reviews

Robert Orłowski

IT Security Expert at Alior Bank S.A.

Unified risk scoring has improved our cloud visibility and simplifies remediation priorities

Qualys TotalCloud provides unified vulnerability and threat assessment across both IAS and SaaS. This solution provides a single prioritized view of risk, which helps reduce the work I would have to do. We are no longer based on CVSS; we are based on Qualys risk scoring, which is based on CVSS plus internal findings made by Qualys, and then assigns its own score. The TruRisk insight feature has found a small number of assets with high vulnerability scores, though I am cautious since some information is classified. Qualys TotalCloud has positively impacted our bank's performance, and we have definitely seen benefits after implementing this solution.

Read full review

Rahul Kumar

Senior Engineer - Penetration Tester at a government with 10,001+ employees

Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports

The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Read full review

Dr. Sajid Latif

Guardium Administrator at Interactive Group

Improvements sought in database optimization while benefiting from robust security monitoring

We use the analytical functionality of Guardium, but the analytical functionality is not so powerful or flexible because it does not include the application user ID. It only includes the database user ID. To identify risky users, it does not support end users, so IBM must incorporate this feature into the built-in analytical engine of the Guardium. There is only one problem I experienced while using Guardium: the internal database of the collector is MySQL, which is not so powerful or flexible. When you make a query in a MySQL database, it takes too much time to respond. IBM should replace this MySQL database with a more powerful internal database for the logging mechanism so that Guardium can collect logging data flexibly and ensure optimization. My overall experience with Guardium is good. The only problem is that IBM must replace the internal DB, MySQL, with a more powerful enterprise-level database because enterprises use it at an enterprise level, and MySQL does not support optimally.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Vulnerability and threat detection and assessment of the criticality of the vulnerabilities exposed are most valuable."

"I would definitely recommend Qualys TotalCloud to other users."

"I appreciate Qualys TotalCloud's ability to onboard any type of device with ease, including containers."

"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."

"Qualys TotalCloud has significantly reduced our workload in terms of managing risks, helping us to be more efficient and save substantial resources."

"I appreciate TotalCloud's real-time protection and remediation features. The remediation options include automated one-click remedies and custom changes that help manage vulnerabilities efficiently."

"The best part I like is the on-demand scans."

"The most valuable feature of Qualys TotalCloud is the visibility it provides."

More Qualys TotalCloud pros

"Acunetix has positively impacted my organization by improving our security review process, identifying vulnerabilities earlier in the deployment cycle, reducing the risk of security issues reaching production, and helping the team address potential threats more efficiently."

"The scalability is more than good; it can operate both as a standalone and it can be integrated with other applications, which makes it a very versatile solution to have, and this solution is simple enough, especially with the cloud."

"The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning."

"The tool's most valuable feature is performance."

"Picks up weaknesses in our app setups."

"It generates automated reports."

"The usability and overall scan results are good."

"The most important element for us is that it's very easy for developers to use, as they don't need to have any knowledge about security or threats; they just run the tool against their application and get the results."

More Acunetix pros

"The most valuable feature is that it provides a simple English recommendation on actions that you need to take once a vulnerability is discovered."

"The best feature is that you can see the activity in your data environment and have the ability to get the vulnerability assessments done quickly with scores that can be compared."

"The Vulnerability Assessment feature is quite stable and helps identify numerous vulnerabilities in databases."

"It helped with some of the regulatory requirements, and it also helped with some of the security analytics and analysis, making it worthwhile from that perspective."

"The reporting features are good and there are many built-in reports that can be quickly configured."

Cons

"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."

"There is room for improvement in vulnerability scanning, particularly for PaaS environments. Currently, Qualys does not have full access to these instances, which limits its effectiveness."

"The cost of Qualys TotalCloud is high and could be more competitive."

"The price is very expensive, actually."

"Overall, we are satisfied with it. However, the response part of the Cloud Detection and Response (CDR) module can be improved. It is not yet in place according to requirements; it is not completely available even though the module has been released."

"Although TotalCloud is a helpful tool, some of its advanced features are still under development."

"Qualys' customer service provides quality answers, but the response time is long, even though it is within the SLA."

"We encountered challenges identifying the correct resource category for certain items, such as those in containers or storage."

More Qualys TotalCloud cons

"One of the biggest problems I've had with Acunetix is that it's hard to replicate things manually because you don't get the raw packet."

"There's a clear need for a reduction in pricing to make the service more accessible."

"The time to fix issues is not too quick, so in the case of time-restricted projects for some customers, this might become a problem."

"There are some versions of the solution that are not as stable as others."

"The pricing is a bit on the higher side."

"The costs for the licensing have changed and it's not in our favor which is why we're now looking at other options."

"Acunetix needs to improve its cost."

"In terms of what needs improvement, the way the licensing model is currently is not very convenient for us because initially, when we bought it, the licensing model was very flexible, but now it restricts us."

More Acunetix cons

"Building policies is not that easy. There are some things that are turned off by default, for example, displaying values."

"The interface could be improved by having sub-groups of tests, ultimately making the process of collecting tests faster."

"I wouldn't use it. That would be my advice to others looking into implementing IBM Guardium Vulnerability Assessment."

"The only problem is that some of the reports come up with blanks and missing data."

"It was not as easy to use. The user-friendliness of it was somewhat lower than what I was expecting. It was also lacking in terms of the ease of the setup. There should be an automatic agent for deployment."

"There is only one problem I experienced while using Guardium: the internal database of the collector is MySQL, which is not so powerful or flexible."

Pricing and Cost Advice

"The cost is high, but it meets our organizational needs."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

"The pricing is comparable. It is built into our other product, so I cannot piecemeal it. It is a part of our subscription."

"Qualys TotalCloud offers good pricing that is affordable and competitive with the market. Our partnership also provides us with additional benefits."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"The pricing for TotalCloud is attractive and competitive in the market. Given the features, especially the dashboard, I have no concerns regarding pricing."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"As a middle management member, I do not have direct pricing knowledge, but based on the knowledge from our meetings, its pricing is competitive."

More Qualys TotalCloud pricing and cost advice

"When we looked at all other vendors and what they were asking for, to provide a third of what Acunetix was capable of doing, it was an easy decision... But now that it's coming to a cost where it's line with market value, it becomes more of a competition... Acunetix is raising the cost of licensing. It's 3.5 times what we were initially quoted."

"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."

"Acunetix was around the same price as all the other vendors we looked at, nothing special."

"The pricing is a little high, and moreover, it's kind of domain-based."

"The solution is expensive."

"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."

"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."

"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."

More Acunetix pricing and cost advice

"One thing not advantageous for it was that it was a little bit more expensive. I would rate it one out of five in terms of pricing."

See which vendors are best for you

Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.

See recommendations

900,644 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Manufacturing Company

18%

Financial Services Firm

14%

Construction Company

Comms Service Provider

Financial Services Firm

12%

Manufacturing Company

10%

Computer Software Company

Comms Service Provider

Financial Services Firm

29%

Healthcare Company

Construction Company

Comms Service Provider

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	10
Midsize Enterprise	3
Large Enterprise	29

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	7
Large Enterprise	19

No data available

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

The price is very expensive, actually.

What needs improvement with Qualys TotalCloud?

Areas that need improvement in every solution include the remediation part. The remediation steps should be simple en...

What is your primary use case for Qualys TotalCloud?

Our use case involves the assets that we have under cloud, the assets exposed to the internet, and the internal appli...

What is your primary use case for Acunetix Vulnerability Scanner?

In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across netw...

What advice do you have for others considering Acunetix Vulnerability Scanner?

I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The too...

What is your experience regarding pricing and costs for Acunetix?

Everything is perfect and good, including the pricing and all related aspects.

What needs improvement with IBM Guardium Vulnerability Assessment?

We use the analytical functionality of Guardium, but the analytical functionality is not so powerful or flexible beca...

What is your primary use case for IBM Guardium Vulnerability Assessment?

We are still using IBM Guardium Vulnerability Assessment. We only use IBM Guardium Data Protection and monitoring, da...

What advice do you have for others considering IBM Guardium Vulnerability Assessment?

We do not use IBM Guardium Vulnerability Assessment for data encryption or any other tool for analytics, or identity ...

Microsoft Defender for Cloud vs Qualys TotalCloud

Comparisons

Wiz vs Qualys TotalCloud

Compared 12% of the time

Compared 8% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 6% of the time

JupiterOne vs Qualys TotalCloud

Compared 5% of the time

Nucleus Security vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

PortSwigger Burp Suite Professional vs Acunetix

Compared 8% of the time

OWASP Zap vs Acunetix

Compared 7% of the time

HCL AppScan vs Acunetix

Compared 4% of the time

Invicti vs Acunetix

Compared 4% of the time

OpenText Dynamic Application Security Testing vs Acunetix

Compared 4% of the time

More Acunetix Competitors

Tenable Nessus vs IBM Guardium Vulnerability Assessment

Compared 19% of the time

Qualys VMDR vs IBM Guardium Vulnerability Assessment

Compared 16% of the time

Rapid7 InsightVM vs IBM Guardium Vulnerability Assessment

Compared 14% of the time

Baseline vs IBM Guardium Vulnerability Assessment

Compared 9% of the time

Microsoft Defender for Cloud vs IBM Guardium Vulnerability Assessment

Compared 3% of the time

More IBM Guardium Vulnerability Assessment Competitors

Product Reports

Qualys TotalCloud

Download Qualys TotalCloud product report

Acunetix

Download Acunetix product report

Vulnerability Management

Download IBM Guardium Vulnerability Assessment product report

IBM Guardium Vulnerability Assessment report

Also Known As

Qualys TotalCloud with FlexScan

AcuSensor

No data available

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Acunetix is a dynamic application security tool used globally for web application vulnerability scanning, focusing on SQL injection and cross-site scripting.

Acunetix provides a comprehensive web vulnerability assessment platform designed for identifying and remediating security threats. Users benefit from its ability to schedule scans, boasting a fast detection rate for common vulnerabilities. The tool's centralized dashboard helps organizations with compliance monitoring and features such as crawling and login sequence enhancements, contributing depth to its security assessments. Despite high praise for its integration capabilities and automated scanning that saves time, pricing and false positives present challenges. Organizations often use Acunetix to maintain internal security and evaluate pre-release environments.

What are Acunetix's main features?

Comprehensive Reporting: Detailed reports assist in security analysis and compliance audits.
User-Friendly Interface: Simple navigation enhances user experience.
Scheduled Scans: Automation of scans allows for continuous monitoring.
Fast Detection: Quickly identifies vulnerabilities like SQL injection and cross-site scripting.
Integration Capabilities: Scalable solutions with compatibility across applications.
Crawling & Login Sequence: Improves depth in security analysis.

What benefits should businesses look for in reviews?

Low False Positive Rate: Accurate vulnerability detection saves time in analysis.
Time Efficiency: Automated scans reduce manual workload, improving team productivity.
Scalability: Integration features help accommodate growth and complexity.
Compliance Support: Centralized dashboard supports regulatory compliance checks.

In industries like finance, healthcare, and technology, Acunetix assists in protecting sensitive data through robust scanning and reporting capabilities. Its ability to perform dynamic assessments makes it a chosen tool in regulatory environments and development settings, offering both internal security inspections and pre-release evaluations.

Invicti

IBM Guardium Vulnerability Assessment provides robust database security through effective vulnerability insights and remediation recommendations, supporting enterprises in achieving enhanced data protection.

IBM Guardium Vulnerability Assessment is designed to offer enterprises comprehensive security management. Its monitoring and analytics capabilities enable effective data assessment and vulnerability identification. Integration with LDAP simplifies multi-user access, bolstered by detailed reporting features. The tool aids regulatory compliance and streamlines security processes. Despite its efficacy, improvements are needed in interface usability, automatic deployment, and third-party integration. Enhanced analytical features and a more potent internal database could elevate its functionality.

What are the key features of IBM Guardium?

Vulnerability Identification: Detects and scores database vulnerabilities.
Monitoring Capabilities: Supports effective data aggregation and analytics.
LDAP Integration: Facilitates easy multi-user access.
Customizable Reporting: Offers robust reporting tools with flexible rules.
Regulatory Compliance: Ensures adherence to security standards and regulations.

What benefits do users find valuable in reviews?

Enhanced Security: Strengthens overall security posture.
Efficient Data Assessment: Allows quick scans and swift data understanding.
Improved Visibility: Increases transparency across data activities.
Compliance Assurance: Helps conform to necessary industry regulations.

IBM Guardium Vulnerability Assessment is widely adopted across enterprise sectors for its robust security management. Organizations frequently employ it for data security, especially when migrating to cloud environments, ensuring the protection of sensitive information throughout its lifecycle. Its capabilities in catalog discovery and activity monitoring make it a preferred choice for businesses requiring advanced security solutions and implementations.

IBM

Sample Customers

Information Not Available

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Information Not Available

Acunetix vs. IBM Guardium Vulnerability Assessment