Try our new research platform with insights from 80,000+ expert users

Acunetix vs Rapid7 AppSpider comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Acunetix
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
7.8
Reviews Sentiment
6.6
Number of Reviews
38
Ranking in other categories
Application Security Tools (12th), Vulnerability Management (19th), DevSecOps (6th)
Rapid7 AppSpider
Ranking in Static Application Security Testing (SAST)
32nd
Average Rating
7.8
Reviews Sentiment
6.7
Number of Reviews
14
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2026, in the Static Application Security Testing (SAST) category, the mindshare of Acunetix is 2.9%, down from 3.3% compared to the previous year. The mindshare of Rapid7 AppSpider is 0.7%, up from 0.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Static Application Security Testing (SAST) Market Share Distribution
ProductMarket Share (%)
Acunetix2.9%
Rapid7 AppSpider0.7%
Other96.4%
Static Application Security Testing (SAST)
 

Featured Reviews

Rahul Kumar - PeerSpot reviewer
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.
HW
Marketing Expert at J's communication
Clients benefit from broad authentication and effective crawling but need localization improvements
Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments One of the most valuable features of AppSpider is its broad range of authentication identification, which is a key reason for its utilization.…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The automated approach to these repetitive discovery attempts would take days to do manually and therefore it helps reduce the time needed to do an assessment."
"The features of Acunetix have proved most effective in identifying vulnerabilities."
"The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code."
"One of the features that I feel is groundbreaking, that I would like to see expanded on, is the IAS feature: The Interactive Application Security Testing module that gets loaded onto an application on a server, for more in-depth, granular findings. I think that is really neat. I haven't seen a lot of competitors doing that."
"The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning."
"We use the solution for the scanning of vulnerabilities like SQL injections."
"Overall, it's a very good tool and a very good engine."
"It's very user-friendly for the testing teams. It's very easy for them to understand things and to fix vulnerabilities."
"The solution is highly stable, rated at ten out of ten."
"The setup is usually straightforward."
"AppSpider's most valuable feature is reporting - everything is stored in the local database so it can be sent to other machines."
"What I like most about AppSpider is that it's easy to use and its automated scan gives me all the details I need to know when it comes to vulnerabilities and their solutions."
"The most valuable feature is the reporting, which is compliant with international standards."
"I would say that it is stable, as I am not aware of any major issues."
"It scans all the components developed within a web application."
"When it is set up properly, it can do scanning on web apps with multiple engines automatically."
 

Cons

"The vulnerability identification speed should be improved."
"Acunetix should improve by further reducing false positives and providing more customized reports, plus better integration with newer tools such as GitHub and Azure DevOps."
"While we do have it integrated with other solutions, it could still offer more integrations."
"There are some versions of the solution that are not as stable as others."
"The pricing is a bit on the higher side."
"I think currently on full scans of large apps, Acunetix takes time, so it can improve the timing part."
"There was an issue related to updates from the internet."
"We want to see how much bandwidth usage it consumes. When we monitor traffic we have issues with the consumption and throttling of the traffic."
"The enterprise interface is too simple. It should be more customizable."
"There are some glitches with stability, and it is an area for improvement."
"Implementing Rapid7 AppSpider requires scanning and self-identification mechanisms. You can add different types of authentication to each scan."
"Integration could be better."
"Support response times are slow and can be improved."
"The performance of the solution could improve. When I compare the speed it is slower than others on the market. There are some tricks we use to help speed up the solution."
"AppSpider could improve in the area of integration. They need to add more integration opportunities."
"One of the challenges I have with AppSpider is that it gives you a lot of false positives, especially when compared to other solutions."
 

Pricing and Cost Advice

"Acunetix was around the same price as all the other vendors we looked at, nothing special."
"When we looked at all other vendors and what they were asking for, to provide a third of what Acunetix was capable of doing, it was an easy decision... But now that it's coming to a cost where it's line with market value, it becomes more of a competition... Acunetix is raising the cost of licensing. It's 3.5 times what we were initially quoted."
"The costs aren't very expensive. It costs around $3000 or $4000."
"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."
"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."
"I would say that Acunetix is expensive because there are products on the market with similar features that are equally or better-priced."
"The price is exceptionally high."
"All things considered, I think it has a good price/value ratio."
"It is expensive if you want to buy the Enterprise version that is able to scan multiple applications at once."
"The price is pretty fair."
"The price of Rapid7 AppSpider cost 9,000 annually but there is limited usage. Large companies are able to negotiate a better price or a better deal for the usage with the vendor."
"AppSpider is closed-source software and you need to acquire a license in order to use it."
"The licensing cost depends on the number of users."
report
Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.
881,082 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
14%
Financial Services Firm
13%
Manufacturing Company
10%
Government
7%
Financial Services Firm
13%
Manufacturing Company
10%
Computer Software Company
9%
Healthcare Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise7
Large Enterprise17
By reviewers
Company SizeCount
Small Business11
Midsize Enterprise2
Large Enterprise1
 

Questions from the Community

What do you like most about Acunetix Vulnerability Scanner?
The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code.
What is your primary use case for Acunetix Vulnerability Scanner?
My main use case for Acunetix is providing a vulnerability scanner for our web application server. I use Acunetix to scan our web security and discover vulnerabilities so we can patch these vulnera...
What advice do you have for others considering Acunetix Vulnerability Scanner?
My advice to others looking into using Acunetix is that it is really helpful to discover the web attacks and have great, powerful reporting so you can have reduced incidents to look at. I have rate...
What is your experience regarding pricing and costs for Rapid7 AppSpider?
The price is not high, but for Japanese customers, localization may incur additional costs.
What needs improvement with Rapid7 AppSpider?
For Japanese customers, localization is needed. The product should offer a GUI in Japanese and provide Japanese reports for end-users.
What is your primary use case for Rapid7 AppSpider?
Our clients use AppSpider to address security concerns for their websites. It is particularly used by customers who require security assessments.
 

Also Known As

AcuSensor
AppSpider
 

Overview

 

Sample Customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
Microsoft
Find out what your peers are saying about Acunetix vs. Rapid7 AppSpider and other solutions. Updated: December 2025.
881,082 professionals have used our research since 2012.