CAST Application Intelligence Platform vs Invicti Web + API comparison

Why PeerSpot?

The compared CAST and Invicti solutions aren't in the same category. CAST is ranked #5 in SDA , and holds a 12.7% mindshare in the category. Invicti is ranked #13 in AS , with an average rating of 7.8, and holds a 2.6% mindshare. Additionally, 83% of CAST users are willing to recommend the solution, compared to 89% of Invicti users who would recommend it.

CAST Application Intelligen...

Read 4 CAST Application Intelligence Platform reviews

1,522 Views
776 Comparison Views

83% willing to recommend

Invicti Web + API

Read 37 Invicti Web + API reviews

13,849 Views
6,509 Comparison Views

89% willing to recommend

CAST Application Intelligen...

Invicti Web + API

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between CAST Application Intelligence Platform and Invicti Web + API based on real PeerSpot user reviews.

Find out what your peers are saying about SonarSource Sàrl, Jellyfish, LinearB and others in Software Development Analytics.

To learn more, read our detailed Software Development Analytics Report (Updated: October 2026).

Buyer's Guide

Software Development Analytics

October 2026

Download the complete report

Helped 920,769 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

CAST Application Intelligen...

Average Rating

7.0

Reviews Sentiment

8.0

Number of Reviews

Ranking in other categories

Software Development Analytics (5th)

Invicti Web + API

Average Rating

7.8

Reviews Sentiment

6.6

Number of Reviews

Ranking in other categories

Application Security Tools (13th), Static Application Security Testing (SAST) (9th), Vulnerability Management (29th), DevSecOps (7th)

Mindshare comparison

While both are Application Lifecycle Management solutions, they serve different purposes. CAST Application Intelligence Platform is designed for Software Development Analytics and holds a mindshare of 12.7%, down 23.7% compared to last year.
Invicti Web + API, on the other hand, focuses on Application Security Tools, holds 2.6% mindshare, up 2.4% since last year.

Software Development Analytics Mindshare Distribution
Product	Mindshare (%)
CAST Application Intelligence Platform	12.7%
SonarQube	19.0%
LinearB	15.7%
Other	52.6%

Software Development Analytics

Application Security Tools Mindshare Distribution
Product	Mindshare (%)
Invicti Web + API	2.6%
SonarQube	10.2%
Checkmarx One	6.8%
Other	80.4%

Application Security Tools

Featured Reviews

Vishal-Goyal

Chief Architect at Persistent Systems

Has a security dashboard that's helpful because it gives compliance checks based on some of the leading frameworks in the industry

The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all. For example, 2022 CWE coverage is still not available in the CAST Application Intelligence Platform. The solution also covers some NIST rules, but it does not cater to all rules. An additional feature I'd like to see in the next update of the CAST Application Intelligence Platform is for it to provide source code developer and contributor details, especially information on which areas of code were touched. This would be a good insight as the CAST Application Intelligence Platform looks into the source code.

Read full review

Rahul Kumar

Senior Engineer - Penetration Tester at a government with 10,001+ employees

Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports

The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Our clients use CAST Highlight for cloud migration. This allows them to remove or remediate the blockers which are highlighted. This part of the solution shows improvement in quality and captures feedback for our clients."

"The most valuable feature of the CAST Application Intelligence Platform is its security dashboard which is a dedicated dashboard that's pretty helpful because it gives compliance checks based on some of the leading frameworks in the industry, such as ISO 5055, OWASP, CWE Top 25, and NIST security guidelines. I find the security dashboard of the solution and the information it provides pretty useful. The security dashboard of the CAST Application Intelligence Platform is a feature that stands out."

"Hourly, daily, and monthly static code analysis before making a project live, therefore controlling the technical debt and code quality."

"Used for controlling the technical debt and code quality."

"We've seen ROI from CAST Application Intelligence Platform because we've been able to leverage it for doing multiple customer engagements and we've been able to win more business for our organization by leveraging the product."

"CAST's risk and security flow detection capabilities are highly effective, particularly in identifying security vulnerabilities. It is one of the most important and valuable features of the platform."

"It supports most programming languages."

"Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments, allowing good dashboard visualization that can be reported easily to management, providing complete visibility on vulnerability metrics."

"There is a lot of documentation on their website which makes setting it up and using it quite simple."

"The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code."

"Overall, the tool is efficient enough to identify and track your vulnerabilities and it's good for intelligence scanning purposes."

"It's a very easy deployment and easy application."

"I haven't seen reporting of that level in any other tool."

"Acunetix is the best service in the world. It is easy to manage. It gives a lot of information to the users to see and identify problems in their site or applications. It works very well."

"I find it to be one of the most comprehensive tools, with support for manual intervention."

More Invicti Web + API pros

Cons

"Implementation could be made more simpler as it is complex."

"The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all."

"It has very few plugins to access different code repositories, so source code has to be fed."

"Areas for improvement in CAST AIP include enhancing support for implementation in complex environments and improving technical support to address organizational challenges alongside engineering issues."

"The integration of this solution could be improved."

"The overall coverage of rules could be improved in the CAST Application Intelligence Platform because it does not cater to or cover all. For example, 2022 CWE coverage is still not available in the CAST Application Intelligence Platform. The solution also covers some NIST rules, but it does not cater to all rules. An additional feature I'd like to see in the next update of the CAST Application Intelligence Platform is for it to provide source code developer and contributor details, especially information on which areas of code were touched. This would be a good insight as the CAST Application Intelligence Platform looks into the source code."

"However, it doesn't seem very helpful or useful for scanning web services, and that has what I feel that the organization could work better on that."

"The pricing is a bit on the higher side."

"The time to fix issues is not too quick, so in the case of time-restricted projects for some customers, this might become a problem."

"In terms of what needs improvement, the way the licensing model is currently is not very convenient for us because initially, when we bought it, the licensing model was very flexible, but now it restricts us."

"The solution should work on dealing with the number of false positives it delivers."

"I believe Acunetix can improve customer support, as the dedicated support staff are often unfamiliar with problems and troubleshooting, leading to communication gaps that delay issue resolution."

"I believe Invicti Web + API can find some improvements such as customization."

"There was an issue related to updates from the internet."

More Invicti Web + API cons

Pricing and Cost Advice

"I do know how the CAST Application Intelligence Platform is licensed, but I'm not able to give the cost because the price is not listed. My company works with individual vendors, so pricing is on a case-to-case basis, but the vendors give specialized pricing because of the enterprise deployment, though my team is aware of product pricing based on lines of code, based on the number of applications, etc., I'm unable to give the exact licensing costs of the CAST Application Intelligence Platform. My company doesn't have to pay extra for some features or services because all are included as part of the enterprise license. On a scale of one to five, with five being very cheap and one being very expensive, I would rate the CAST Application Intelligence Platform as three out of five."

"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."

"Acunetix was around the same price as all the other vendors we looked at, nothing special."

"The cost is based on two types of licenses, ConsultLite, and ConsultPlus, as well as the number of domains that are scanned."

"The pricing is a little high, and moreover, it's kind of domain-based."

"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."

"The price is exceptionally high."

"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."

"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."

More Invicti Web + API pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Software Development Analytics solutions are best for your needs.

See recommendations

920,769 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

17%

Outsourcing Company

16%

Construction Company

10%

Government

Manufacturing Company

12%

Comms Service Provider

11%

Financial Services Firm

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	7
Large Enterprise	19

Questions from the Community

Ask a question

Earn 20 points

What is your primary use case for Acunetix Vulnerability Scanner?

In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across network traffic. The main use cases usually fall into a few core areas, with primary...

See all answers

What advice do you have for others considering Acunetix Vulnerability Scanner?

I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The tool is powerful, but its effectiveness depends heavily on how the authenticated ar...

See all answers

What is your experience regarding pricing and costs for Acunetix?

Everything is perfect and good, including the pricing and all related aspects.

See all answers

Comparisons

SonarQube vs CAST Application Intelligence Platform

Compared 26% of the time

Veracode vs CAST Application Intelligence Platform

Compared 11% of the time

OpenText Core Application Security vs CAST Application Intelligence Platform

Compared 10% of the time

Seerene vs CAST Application Intelligence Platform

Compared 8% of the time

More CAST Application Intelligence Platform Competitors

PortSwigger Burp Suite Professional vs Invicti Web + API

Compared 6% of the time

OpenText Dynamic Application Security Testing vs Invicti Web + API

Compared 5% of the time

OWASP Zap vs Invicti Web + API

Compared 4% of the time

Checkmarx One vs Invicti Web + API

Compared 3% of the time

HCL AppScan vs Invicti Web + API

Compared 3% of the time

More Invicti Web + API Competitors

Product Reports

Buyer's Guide

Software Development Analytics

October 2026

CAST Application Intelligence Platform report

Download CAST Application Intelligence Platform product report

Buyer's Guide

Invicti Web + API

October 2026

Download Invicti Web + API product report

Also Known As

CAST AIP

AcuSensor

Overview

CAST Application Intelligence Platform is a leading software analysis and measurement system designed to support advanced IT strategies. It provides comprehensive insights into software structure, performance, and security, aiding developers and IT leaders in effective decision-making.

CAST Application Intelligence Platform offers a robust solution for understanding complex software ecosystems. By automating application analytics, it accelerates the identification of software issues, reducing the technical debt and improving code quality. The platform is particularly useful for legacy system modernization, cloud migration initiatives, and enhancing application stability and scalability.

What are the key features of CAST Application Intelligence Platform?

Automated Analysis: Provides deep insights without manual intervention.
Code Quality Assessment: Enhances code reliability and security.
Technical Debt Measurement: Identifies and reduces associated costs.
Cloud Readiness: Evaluates applications for seamless cloud transition.

What benefits should be considered in reviews?

Improved Developer Efficiency: Boosts productivity through automated workflows.
Cost Reduction: Minimizes expenses related to software maintenance.
Risk Mitigation: Reduces vulnerabilities with insightful security assessments.
Enhanced Decision Making: Supports strategic IT planning with precise data.

CAST Application Intelligence Platform is heavily utilized in industries like finance, healthcare, and retail, where software quality and security are critical. Implementing its solutions allows these sectors to modernize legacy systems, ensuring compliance and streamlining operations through reliable software architecture evaluation.

CAST

Acunetix is a robust web application security testing tool offering rapid scanning, user-friendly interfaces, and accurate vulnerability detection with minimal false positives. It supports both cloud and on-premises deployment, making it versatile for various security needs.

Acunetix is distinguished by its capability to identify critical vulnerabilities such as cross-site scripting and SQL injection with high precision. It integrates seamlessly with CI/CD tools, supporting continuous scanning and large-scale application management. The centralized dashboard and detailed automated reporting streamline operations. Despite its benefits, users suggest improvements like reducing false positives, flexible pricing, and enhanced API scanning. Better integration with platforms like GitHub and Azure DevOps is sought, alongside more comprehensive customization and faster scanning. Mobile application scanning and improved team collaboration tools are also desired.

What features make Acunetix stand out?

Rapid Scanning: Delivers fast and comprehensive security assessments.
User-Friendliness: Intuitive interface simplifies operations for diverse teams.
Detailed Reporting: Automated reports enhance vulnerability management.
High Accuracy: Detects vulnerabilities with minimal false positives.
CI/CD Integration: Seamless integration supports continuous development processes.

What benefits should users consider when evaluating?

Vulnerability Detection: Critical for identifying potential security threats efficiently.
Flexibility: Supports both cloud and on-premises environments.
Compliance Support: Aids in meeting standards like PCI DSS.
Scalability: Capable of handling large-scale web applications.

Acunetix is widely implemented across industries undertaking web application security assessments, including those requiring penetration testing and vulnerability assessment. It ensures applications meet security protocols and complies with standards while fitting into CI/CD workflows for secure pre-release checks.

Invicti

Sample Customers

Steria, T-Systems MMS, Atos Origin, Accenture, Capgemini

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Buyer's Guide

Software Development Analytics

October 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Jellyfish, LinearB and others in Software Development Analytics. Updated: October 2026.

DOWNLOAD NOW

920,769 professionals have used our research since 2012.

We monitor all Software Development Analytics reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.