Acunetix
Web application and API vulnerability scanner, now sold as Invicti Web + API.
Technical Architecture & Overview
Acunetix scans web applications, APIs, and single-page apps for vulnerabilities, including the OWASP Top 10 and OWASP API Top 10, with proof-based confirmation of findings. It integrates with CI/CD, ticketing, and other security tools. Invicti now sells it as Invicti Web + API, a package of the Invicti Platform that is cloud-hosted, with on-premises deployment listed as coming soon.
Targeted Technical Use Cases
Teams that need DAST for web applications and APIs with proof-based confirmation of exploitable findings.
Evaluation & Trade-offs
Core Strengths
- +Detection library the vendor puts at more than 7,000 issues.
- +Covers single-page apps and JavaScript-heavy frontends.
- +Sold as one of three packages on the Invicti Platform.
Trade-Offs & Limitations
- -On-premises deployment is listed as coming soon; current hosting is cloud.
- -Pricing is by quote.
Defensive Security Application
Automated web vulnerability detection with verified findings for remediation.
Frequently Asked Questions
What is Acunetix?→
Acunetix scans web applications, APIs, and single-page apps for vulnerabilities, including the OWASP Top 10 and OWASP API Top 10, with proof-based confirmation of findings. It integrates with CI/CD, ticketing, and other security tools. Invicti now sells it as Invicti Web + API, a package of the Invicti Platform that is cloud-hosted, with on-premises deployment listed as coming soon.
What is Acunetix used for?→
Teams that need DAST for web applications and APIs with proof-based confirmation of exploitable findings.
What are the strengths of Acunetix?→
- +Detection library the vendor puts at more than 7,000 issues.
- +Covers single-page apps and JavaScript-heavy frontends.
- +Sold as one of three packages on the Invicti Platform.
What are the limitations of Acunetix?→
- +On-premises deployment is listed as coming soon; current hosting is cloud.
- +Pricing is by quote.
How is Acunetix used defensively?→
Automated web vulnerability detection with verified findings for remediation.