

Acunetix and Sonatype Lifecycle are both prominent in software security and lifecycle management. Acunetix holds an edge in pricing and customer support, while Sonatype Lifecycle surpasses in feature offerings and perceived value.
Features: Acunetix is noted for its comprehensive threat detection, a wide range of integrations, and strong support for security tools. Sonatype Lifecycle excels in detailed component risk analysis, automated policy enforcement, and extensive features for managing open-source components.
Room for Improvement: Acunetix users suggest enhancing report customization, improving scan speed, and operational efficiency. Sonatype Lifecycle requires better UI responsiveness during complex tasks, improvements in performance under load, and more intuitive interfaces.
Ease of Deployment and Customer Service: Acunetix offers straightforward deployment and responsive customer service. Sonatype Lifecycle demands more initial setup efforts but provides versatile configurations suitable for complex environments, supported by robust service options.
Pricing and ROI: Acunetix is budget-friendly, offering a quicker ROI, appealing to smaller organizations. Sonatype Lifecycle, although more expensive, provides long-term value with advanced features, beneficial for enterprises focused on comprehensive security capabilities.
It saves a significant amount of time by covering attack surfaces.
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
I have seen a return on investment with Acunetix, including time saved and cost reduction, because it provides us threats on our web application servers.
The open-source section of the code lifecycle is being automatically secured by Sonatype Lifecycle, which also offers a firewall for these repositories and SBOM manager.
We have seen cost savings and efficiency improvements as we now know what happens in what was previously a black box.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
The technical support from Invicti is very good and fast.
Support staff not being familiar with the problem.
They are helpful when we raise any tickets.
Customer support is responsive, typically replying in under two hours
Acunetix can handle increasing workloads and more applications easily.
Acunetix's scalability for my growing needs is great; it is a very scalable product compared to others.
JFrog is easier to configure for high availability as it does not require extra components.
The scalability of Sonatype Lifecycle is robust, especially with its SaaS offering and ease of resource scaling, whether horizontally or vertically.
I did not need to reach customer support because the product is very stable.
Sonatype Lifecycle is very stable, especially in the binary repository management use case for managing binary artifacts.
Sonatype Lifecycle is stable technologically with minimal encountered issues.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
I believe Acunetix can improve customer support, as the dedicated support staff are often unfamiliar with problems and troubleshooting, leading to communication gaps that delay issue resolution.
We also noticed a lack of detailed information for configuring Sonatype Lifecycle for high availability and data recovery.
The visibility and clarity instructions are lacking. Users, especially those less experienced, are often baffled by the breadth of Sonatype Lifecycle Nexus IQ server's capabilities and may not know where to start.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
We secured a special licensing model for penetration testing companies, which is cost-effective.
The pricing of Acunetix is pretty expensive and could be improved.
For larger numbers like our case with 1,000 user licenses, JFrog becomes much more cost-effective, roughly ten times cheaper than Sonatype.
The price and cost revolve primarily around the deployment aspect.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
The integration into our CICD pipeline enables us to continuously monitor code changes and identify new vulnerabilities.
The most valuable feature for us is Sonatype Lifecycle's capability in identifying vulnerabilities.
Any person who is a basic, technically sound person can just start with it, make an application, assign it to an organization, upload the code or integrate it with it, and within clicks of less than five buttons, we have a CycloneDX or an SBOM report.
| Product | Market Share (%) |
|---|---|
| Acunetix | 2.1% |
| Sonatype Lifecycle | 2.0% |
| Other | 95.9% |


| Company Size | Count |
|---|---|
| Small Business | 15 |
| Midsize Enterprise | 7 |
| Large Enterprise | 17 |
| Company Size | Count |
|---|---|
| Small Business | 13 |
| Midsize Enterprise | 8 |
| Large Enterprise | 29 |
Acunetix Web Vulnerability Scanner is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross site scripting, and other exploitable vulnerabilities.
Sonatype Lifecycle enhances enterprise security, helping reduce software risk efficiently. It offers automation and high-quality data to manage open source and AI risk across the SDLC, facilitating quicker issue resolution.
Sonatype Lifecycle reduces software vulnerabilities by offering advanced automation capabilities, ensuring reliable management of open source and AI risks. Through Golden Pull Requests, smart recommendations, and zero-effort fixes, it helps maintain software quality without disrupting development. Its adaptable policies enforce security, legal, and quality standards effectively, reducing potential rework and production issues. The platform provides deep insights into vulnerability, license, quality, and architecture, allowing teams to prioritize risks effectively while continuously monitoring changes. Comprehensive enterprise reporting boosts visibility into the effectiveness of security programs.
What features does Sonatype Lifecycle offer?Sonatype Lifecycle is widely used to enhance security across industries by automating DevSecOps and integrating into build pipelines. Companies employ it for proactive monitoring of third-party libraries, ensuring compliance with licensing standards, and managing firewalls to prevent insecure components. It supports organizations in maintaining robust software supply chain security.
We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.