Cisco SecureX [EOL] vs Invicti Web + API comparison

Why PeerSpot?

Cisco and Invicti are both solutions in the Application Security Tools category. Additionally, 100% of Cisco users are willing to recommend the solution, compared to 89% of Invicti users who would recommend it.

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Oct 6, 2026

Acunetix and Cisco SecureX compete in vulnerability management and security orchestration. Each has unique strengths, with Acunetix excelling in vulnerability detection and Cisco SecureX offering superior integration with other Cisco products.

Features: Acunetix focuses on vulnerability detection across various applications and offers detailed, user-friendly reports. It reliably uncovers false positives and integrates seamlessly with CI/CD tools and DevOps environments. Cisco SecureX offers robust integration abilities with a wide array of Cisco solutions, comprehensive security analytics, and orchestration capabilities, providing significant visibility and integration within Cisco products.

Room for Improvement: Acunetix would benefit from improvements in pricing, reduction of false positives, and enhancements in advanced reporting and API scanning. Its user interface could also be simplified. Cisco SecureX users request better third-party integrations, enhanced automation features, and more playbooks and on-premises options. Strengthening these areas could enhance its overall utility.

Ease of Deployment and Customer Service: Acunetix provides diverse deployment options, including on-premises and cloud, with technical support praised but occasionally critiqued for slow response. Cisco SecureX mainly offers cloud deployment with flexible options and is notable for responsive customer support integrated into the broader Cisco ecosystem.

Pricing and ROI: Acunetix is perceived as costly, which might restrict smaller businesses despite its robust security benefits. It provides a return on investment through enhanced security features. Cisco SecureX, often available for free when bundled with other Cisco products, offers high value to those already in Cisco's ecosystem, highlighting a cost-effective pricing model that appeals to current Cisco users.

To learn more, read our detailed Application Security Tools Report (Updated: September 2026).

Buyer's Guide

Application Security Tools

September 2026

Download the complete report

Helped 916,771 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

Qualys TotalCloud

Featured Reviews

reviewer2859021

Sr Security Engineer at a tech vendor with 5,001-10,000 employees

Risk-based triage has transformed container security and now prioritizes high-impact threats

The best features Qualys TotalCloud offers currently include managing cloud infrastructure and container security while facing major challenges such as alert fatigue. Traditional vulnerability scanners flag hundreds of CVEs on short-lived Kubernetes containers, some of which have no internet exposure or are gone before we can even triage them. I leverage Qualys TotalCloud to move beyond static CVSS. I use it to implement runtime exposure, correlation risk reprioritization, and shift-left integration. This notifies developers to fix a base image upstream rather than patching live ephemeral instances. In my work with cloud and container security, the biggest operational hurdle was alert fatigue. I use Qualys to shift left from static CVSS severity to context-aware risk prioritization. I correlated raw vulnerability data with real-time risk factors such as public network exposure, active runtime execution, or overly permissive IAM roles. This allows us to immediately drop the priority of isolated containers and escalate lower-severity CVEs that sit on an exposed, high-risk path. We can map these findings directly back to our CI/CD pipelines so developers can patch the root base images upstream. We have drastically cut down the signal-to-noise ratio, saved a lot of manual hours doing triage work, and ensured engineering effort goes directly towards high-impact risk reduction.

Read full review

Dene Lewis

Head of Technical Strategy and Direction CAE Technology Services Ltd at CAE Technology Services Limited

A scalable SaaS based platform that helps with cyber threat intelligence and automated hunting

I would rate Cisco SecureX a ten out of ten. I find the product to be a fantastic platform. If you are eligible, start using it straight away. The best way to evaluate it is to start using it and see where it fits within your organization. I think it helps our customers really deliver their SecOps goals, and I see it as a core foundation of CAE's own security strategy going forward. Our partnership with Cisco is one that was built on trust over a long period of time. This has enabled us to work together to be able to provide the solutions that our customers need to drive their organizations forward. The value we add as a reseller is being able to work closer with our customers, understand them, and get intimate with their organizations. That enables us to offer them the right solutions that will help them achieve their goals.

Read full review

Rahul Kumar

Senior Engineer - Penetration Tester at a government with 10,001+ employees

Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports

The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"Its dashboards are brilliant. It provides in-depth insights."

"CSPM is currently the most used feature, and we are enjoying the new feature, FlexScan, which is valuable for Internet-facing VMs."

"The best features in Qualys TotalCloud include the total asset management of the cloud environment. It is very easy to export the report and see the vulnerabilities related to the cloud specifically."

"I rate the breadth of FlexScan in providing visibility into on-premises, multicloud, and container environments as fantastic."

"The best feature would be the ability to create policies. It is easy to control and update policies as required."

"Qualys TotalCloud is overall the best tool available in the market for scanning purposes."

"Having everything in a single place to look for it and a single integration into ServiceNow has been the big transformation."

"Qualys TotalCloud has improved our security posture."

More Qualys TotalCloud pros

"Its cybersecurity and resilience have been extremely important for our organization."

"It has evolved a lot, just that monitoring piece to the current Orchestrator piece. The additional analytics are there. They now have something called Insight, which can basically take data from Microsoft Azure AD and Intune to give us information about our endpoints. This is detailed information about the endpoints, from Secure Endpoint and all these different products. So, it is just constantly evolving. Every time that it evolves, we have more information with more visibility. There are more features that we have that just make everything so much easier, and it is in one place. I don't have to keep going back and forth. I don't have to go to Secure Endpoint and ISE to get the data. I don't have to go to Intune on Microsoft to get the information. It is all in one place."

"The most valuable feature is its ability to manage all the applications and visibility. For example, if there is malware, spam, or another component that wants to attack the company in my servers, network, or applications, then SecureX will react to the problem."

"When it comes as a business bundle, we come to customers to provide a one-stop shop, and we provide a return of value on human resources, with an XDR SecureX platform offer that customers love."

"If management wants to ingest reports at a high level from all of the different products, they would only need one login to SecureX to view this information as opposed to separate logins for each of the integrated products."

"I like that I don't have to jump around to five different products and log into five different places to view the data that it returns."

"The automation and orchestration tools are the most valuable features."

"The ability to create firewalls online has been most valuable including the ability to create rules."

More Cisco SecureX [EOL] pros

"Overall, the tool is efficient enough to identify and track your vulnerabilities and it's good for intelligence scanning purposes."

"The features of Acunetix have proved most effective in identifying vulnerabilities."

"Picks up weaknesses in our app setups."

"The usability and overall scan results are good."

"Segregation of reports is really, really good with Acunetix; it provides us with a lot of in-depth details."

"It has been able to find some vulnerabilities, and we've been able to remediate our websites and vulnerabilities, thanks to Acunetix."

"Every organization who has their assets over the internet and are exposed to a public website needs to have vulnerability assessment using Acunetix."

"The vulnerability scanning option for analyzing the security loopholes on the websites is the most valuable feature of this solution."

More Invicti Web + API pros

Cons

"With the growing integration of AI, I would like Qualys to enhance its service offerings to better accommodate AI-related risks."

"The onboarding process is a bit difficult. In the initial phase, it is very difficult to understand the features, what the dashboard contains, and what criteria they are using."

"There should be improvement from a dashboard perspective when collecting and showcasing data to lead management."

"Their customer support needs improvement."

"The price is very expensive, actually."

"The downside is only in container security, but it has not been a long time since they introduced these models."

"Some major banks and insurance companies require an on-premises solution for comprehensive vulnerability management, which TotalCloud does not offer."

"In my opinion, the combination of detection and protection features in Qualys TotalCloud cannot protect but can only detect."

More Qualys TotalCloud cons

"Remediation stuff could be integrated into the product's automation."

"They could expand into more areas."

"The documentation can be improved and the on-prem integration. The set of applications that it was integrated with wasn't comprehensive."

"For us, the biggest sticking point is that the product is not being designed for multi-tenancy use at present, from an MSP perspective."

"I would rate this solution 7 out of 10. It's a great idea if it worked consistently, but it has to be way more mature than when I used it."

"I would like it to integrate with another solution, e.g., DNA. I would like it to connect to that solution, but not the security aspect."

"The front-end work controls the new algorithm and the firewall rules. The search feature of these rules could be improved."

"It would be nice if they had a different pricing model. Most of our budget for projects goes towards Cisco."

More Cisco SecureX [EOL] cons

"The solution's pricing could be better."

"The cost can be reduced as management has noted it to be on the higher side."

"The solution should work on dealing with the number of false positives it delivers."

"The Acunetix licensing and pricing model is somewhat complicated. If we calculated all of our domains and sub-domains, the sum would be huge; that's why we thought of leaving Acunetix."

"It is difficult to create a proxy connection."

"However, it doesn't seem very helpful or useful for scanning web services, and that has what I feel that the organization could work better on that."

"It should be easier to recreate something manually, with the manual tool, because Acunetix is an automatic tool. If it finds something, it should be easier to manually replicate it. Sometimes you don't get the raw data from the input and output, so that could be improved."

"We have had issues during upgrades where their scans worked on some apps better with previous versions. Then, we had to work with their tech support, who were great, to get it fixed for the next version."

More Invicti Web + API cons

Pricing and Cost Advice

"Qualys TotalCloud offers cost-effective licensing flexibility."

"Qualys TotalCloud is expensive."

"While Qualys TotalCloud's pricing is currently acceptable, it is becoming increasingly expensive and may soon be considered overpriced."

"Qualys TotalCloud is cost-efficient and was selected for its value compared to other products."

"Qualys TotalCloud offers competitive pricing given its comprehensive suite of features, including integration, assessment, remediation, and detection capabilities, all within a single platform."

"It isn't cheap, but it's reasonable. It helps us to manage things with very few resources."

"TotalCloud's price is about right where I would expect it to be."

"I am not sure about the pricing. From what I understand, it is a bit on the higher side, but I do not have the exact numbers."

More Qualys TotalCloud pricing and cost advice

"It would be nice if they had a different pricing model. Most of our budget for projects goes towards Cisco."

"It comes free with all Cisco products. So, it is a good price."

"It is free. It can't get any better than that."

"You can spend less money for another solution, but if you really want to have a good solution you have to pay. We are happy that we are getting such a good solution for what we are spending."

"The pricing is the best part of this solution. It is free if you buy Umbrella or Duo Security. It is also a good solution."

"The product is absolutely free to any customer. As such, the only thing one must keep in mind is that as long as he already has one Cisco security product, irregardless of what that product is, SecureX is available for free."

"Cisco SecureX is more expensive than Trend Micro. However, considering the integration capabilities with other solutions and the quality of technical support, I believe there's justification for the price difference."

"The pricing is competitive, especially for education institutions. Licensing can be a little bit difficult to navigate, especially with resellers with Cisco, but for us it has been pretty easy."

More Cisco SecureX [EOL] pricing and cost advice

"The costs aren't very expensive. It costs around $3000 or $4000."

"The solution is expensive."

"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."

"When we looked at all other vendors and what they were asking for, to provide a third of what Acunetix was capable of doing, it was an easy decision... But now that it's coming to a cost where it's line with market value, it becomes more of a competition... Acunetix is raising the cost of licensing. It's 3.5 times what we were initially quoted."

"The price is exceptionally high."

"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."

"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."

"All things considered, I think it has a good price/value ratio."

More Invicti Web + API pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.

See recommendations

916,771 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Comms Service Provider

18%

Outsourcing Company

12%

Manufacturing Company

11%

Financial Services Firm

11%

Outsourcing Company

23%

Construction Company

13%

Marketing Services Firm

Manufacturing Company

12%

Financial Services Firm

11%

Comms Service Provider

10%

Computer Software Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	16
Midsize Enterprise	10
Large Enterprise	37

By reviewers
Company Size	Count
Small Business	4
Midsize Enterprise	7
Large Enterprise	3

By reviewers
Company Size	Count
Small Business	18
Midsize Enterprise	7
Large Enterprise	19

Questions from the Community

What is your experience regarding pricing and costs for Qualys TotalCloud?

I was not involved in pricing, setup cost, and licensing, but I can say that the setup was fast, within a quarter, an...

See all answers

What needs improvement with Qualys TotalCloud?

In terms of improvements, the features we are using in Qualys TotalCloud are working in the best optimal way, and I d...

See all answers

What is your primary use case for Qualys TotalCloud?

I have been using Qualys TotalCloud for the last eight months to scan the hardware and the virtual devices in our inf...

See all answers

Ask a question

Earn 20 points

What is your primary use case for Acunetix Vulnerability Scanner?

In a typical enterprise environment, Acunetix is mainly used for visibility, detection, and investigation across netw...

See all answers

What advice do you have for others considering Acunetix Vulnerability Scanner?

I advise that Acunetix is the best option. Invest time in proper initial configuration and scope definitions. The too...

See all answers

What is your experience regarding pricing and costs for Acunetix?

Everything is perfect and good, including the pricing and all related aspects.

See all answers

Comparisons

Wiz vs Qualys TotalCloud

Compared 11% of the time

Microsoft Defender for Cloud vs Qualys TotalCloud

Compared 7% of the time

JupiterOne vs Qualys TotalCloud

Compared 6% of the time

Orca Security vs Qualys TotalCloud

Compared 6% of the time

Prisma Cloud by Palo Alto Networks vs Qualys TotalCloud

Compared 5% of the time

More Qualys TotalCloud Competitors

Cortex XDR by Palo Alto Networks vs Cisco SecureX [EOL]

Compared 6% of the time

Cisco Secure Network Analytics vs Cisco SecureX [EOL]

Compared 5% of the time

TrendAI Vision One – Cloud Security vs Cisco SecureX [EOL]

Compared 4% of the time

ERPScan SMART Cybersecurity Platform vs Cisco SecureX [EOL]

Compared 4% of the time

More Cisco SecureX [EOL] Competitors

PortSwigger Burp Suite Professional vs Invicti Web + API

Compared 7% of the time

OpenText Dynamic Application Security Testing vs Invicti Web + API

Compared 5% of the time

OWASP Zap vs Invicti Web + API

Compared 4% of the time

Checkmarx One vs Invicti Web + API

Compared 4% of the time

Invicti vs Invicti Web + API

Compared 3% of the time

More Invicti Web + API Competitors

Product Reports

Buyer's Guide

Qualys TotalCloud

September 2026

Download Qualys TotalCloud product report

Buyer's Guide

Cisco SecureX [EOL]

October 2026

Download Cisco SecureX [EOL] product report

Buyer's Guide

Invicti Web + API

October 2026

Download Invicti Web + API product report

Also Known As

Qualys TotalCloud with FlexScan

Kenna.AppSec, Kenna.VI

AcuSensor

Overview

Qualys TotalCloud enhances security posture across cloud environments with continuous monitoring, vulnerability management, and risk visualization, ensuring efficient threat assessment and automated remediation for improved cyber risk reduction.

Qualys TotalCloud offers a robust suite of security tools essential for organizations managing multi-cloud infrastructures. By integrating cloud accounts and automating workflows, it supports AWS, Azure, and GCP, offering comprehensive vulnerability management and zero-day detection. The platform's user-friendly design, combined with its extensive risk management and unified threat assessment capabilities, enables organizations to prioritize and remediate vulnerabilities effectively. TruRisk Insights provides clear insights on cyber risks, while the automation options streamline patch management and scanning processes. API integration across IaaS and SaaS environments further enhances resource allocation efficiency and saves time, addressing misconfigurations across cloud environments.

What are the most important features of Qualys TotalCloud?

Accurate Vulnerability Reports: Delivers precise and actionable insights for risk mitigation.
Zero-Day Detection: Identifies and addresses zero-day vulnerabilities proactively.
Unified Threat Assessment: Offers comprehensive evaluation of threats across the environment.
Extensive Risk Management: Manages risks effectively with advanced insights and prioritization.
Continuous Monitoring: Provides non-stop surveillance for vulnerabilities and threats.
Cloud-Native Automation: Streamlines processes and reduces manual efforts using automation.
FlexScan for Internet-Facing VMs: Scans external VMs efficiently to detect vulnerabilities.
Dashboard Risk Visualization: Clear visualization helps prioritize vulnerabilities.

What benefits and ROI should users look for?

Improved Security Posture: Enhances threat detection and response across clouds.
Time Savings: Automation reduces time spent on manual vulnerability management.
Resource Efficiency: Better allocation of resources through streamlined workflows.
Enhanced Risk Prioritization: Focus on critical vulnerabilities for effective mitigation.
Integrated Cloud Accounts: Facilitates seamless cloud management and security.

Qualys TotalCloud is deployed in sectors needing rigorous vulnerability management, such as finance and healthcare. Companies utilize it to secure multi-cloud environments like AWS, Azure, and GCP, focus on compliance, and integrate security into CI/CD pipelines to detect and remedy threats pre-deployment.

Qualys

Cisco SecureX is an integrated security platform that connects the breadth of Cisco's integrated security portfolio and the customer's infrastructure to create a consistent experience. The solution unifies visibility, enables automation, and strengthens your security across network, endpoints, cloud, and applications. Cisco SecureX is embedded within every Cisco Security product and supports integrations with SIEM and SOAR, so customers will not need to replace any solution or worry about layering on new technology.

Cisco SecureX Features

Cisco SecureX has many valuable key features. Some of the most useful ones include:

Unified overview: Cisco SecureX offers key metrics on transactions and threats for network, endpoints, cloud and applications. In addition, the SecureX interface is integrated into all Cisco Security technologies.

Automation and an increase in operational efficiency: With Cisco SecureX, you gain better automation of workflows for products of the Cisco Security portfolio and third parties, allowing you to focus on other more important tasks. By eliminating manual work (through automatic identification of threats using analytical data of Cisco Talos and other sources), the solution helps your organization save a significant amount of time.

Security strengthening: Cisco SecureX makes it easy to compare analytical data from a set of various sources with the telemetry received from network, endpoints, e-mail, cloud, and third-party products.

Cisco SecureX Benefits

Some of the benefits of using Cisco SecureX include:

Secure every business endeavor with an open, integrated platform that has out-of-the-box interoperability and scales to meet security needs.

Advance your security maturity level using existing resources.

Turn security from a blocker into an enabler. Cisco SecureX allows you to add new security capabilities for the threat landscape.

Maximize your operational efficiency, helping you get the most from your security investments.

Reviews from Real Users

Below are some reviews and helpful feedback written by Cisco SecureX users.

PeerSpot user Wouter H., Technical Team Lead Network & Security at Missing Piece BV, shares several reasons why he thinks the solution is fantastic. In his opinion, “SecureX takes all the separate pieces of security within your company, adds in intelligence from different sites and services on the internet, and makes them work together. If an email is received on a machine and malware is being executed, it can be put into lockdown mode. The fact that you can have a single solution that combines endpoint intelligence with email intelligence, firewalls, and publicly available intelligence is really helpful. Also, SecureX provides us with contextual awareness throughout our security ecosystem. Before SecureX, things that were not possible, or that would take days, now literally take seconds to find out.

Michal S., Infrastructure Engineer at a media company, says, “SecureX provides many measurements and has a really good dashboard. Working with it you are able to see things very clearly and you have every detail on a single display. That saves us money and time.” He also adds, “It brings all our data into a central point. It also shows us many data connections between many of our environments. SecureX gives you really good information about potential risks. You are able to find the source of a risk, a potential risk from a user or a machine.”

Blair A., Technology Director at Shawnee Heights USD #450, explains, "One of the most valuable features is the simplicity of deploying SecureX. It's very easy to do that and then you gain very detailed visibility into everything that's going on in your network and, obviously, at the device level. There's just a wealth of information that you can pull from all of these products that are part of SecureX. You know exactly if you have an issue or not."

Cisco

Acunetix is a robust web application security testing tool offering rapid scanning, user-friendly interfaces, and accurate vulnerability detection with minimal false positives. It supports both cloud and on-premises deployment, making it versatile for various security needs.

Acunetix is distinguished by its capability to identify critical vulnerabilities such as cross-site scripting and SQL injection with high precision. It integrates seamlessly with CI/CD tools, supporting continuous scanning and large-scale application management. The centralized dashboard and detailed automated reporting streamline operations. Despite its benefits, users suggest improvements like reducing false positives, flexible pricing, and enhanced API scanning. Better integration with platforms like GitHub and Azure DevOps is sought, alongside more comprehensive customization and faster scanning. Mobile application scanning and improved team collaboration tools are also desired.

What features make Acunetix stand out?

Rapid Scanning: Delivers fast and comprehensive security assessments.
User-Friendliness: Intuitive interface simplifies operations for diverse teams.
Detailed Reporting: Automated reports enhance vulnerability management.
High Accuracy: Detects vulnerabilities with minimal false positives.
CI/CD Integration: Seamless integration supports continuous development processes.

What benefits should users consider when evaluating?

Vulnerability Detection: Critical for identifying potential security threats efficiently.
Flexibility: Supports both cloud and on-premises environments.
Compliance Support: Aids in meeting standards like PCI DSS.
Scalability: Capable of handling large-scale web applications.

Acunetix is widely implemented across industries undertaking web application security assessments, including those requiring penetration testing and vulnerability assessment. It ensures applications meet security protocols and complies with standards while fitting into CI/CD workflows for secure pre-release checks.

Invicti

Sample Customers

Information Not Available

NHS, Rackspace, UNC Pembroke, University of North Carolina at Charlotte, Missing Piece

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Buyer's Guide

Application Security Tools

September 2026

Download Free Report

Find out what your peers are saying about SonarSource Sàrl, Checkmarx, Veracode and others in Application Security Tools. Updated: September 2026.

DOWNLOAD NOW

916,771 professionals have used our research since 2012.

See our list of best Application Security Tools vendors and best Vulnerability Management vendors.

We monitor all Application Security Tools reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.