- Home
- Website Security Software
- Acunetix
Acunetix
Austin, Texas, United States
What it is
Acunetix, now Invicti Web + API, is a dynamic application security testing product that scans running web applications and APIs for exploitable vulnerabilities. Proof-based scanning can validate findings and provide evidence of exploitability, helping teams assess false positives. The product says it identifies more than 7,000 issues, including OWASP Top 10 and OWASP API Top 10 risks and business logic flaws. It supports single-page and JavaScript-heavy applications, REST, GraphQL, and SOAP APIs, including authenticated user flows. Its AI-driven risk scoring uses more than 200 signals to predict risk before a scan starts. Listed issue tracker integrations include Jira, Microsoft TFS (Azure DevOps), GitHub, GitLab, Bugzilla, and Mantis; Acunetix Premium also integrates with Jenkins. Web + API pricing is available by request, and the pricing page offers Proof of Concept licenses to try the complete solution in an organization’s environment. The separate Agentic Pentest option is listed at $500, paid once for a single application and its API suite.
For and against
For
- Scans web applications and APIs
- Proof-based validation provides evidence of exploitability
- Supports REST, GraphQL, and SOAP APIs
- Lists integrations with major issue trackers
- Offers Proof of Concept licenses
Against
- No free plan is listed
- Web + API pricing is available by request
- FIPS compatibility does not include certification or verification
The verdict
Acunetix focuses on vulnerability scanning across web applications and APIs, with proof-based validation and a broad stated issue scope. Pricing for Web + API requires a quote, while Agentic Pentest is listed at $500, paid once.
Who it suits
Acunetix is aimed at small and mid-size organizations managing web security. It may suit teams scanning web applications and APIs, including authenticated user flows.
Plans and prices
Agentic Pentest
$500 max per pentest · single application and its API suite · audit-ready PDF reports · delivery within 24 hours
Read 29 Sep 2026 · acunetix.com
Web + API
Unlimited coverage · cloud hosting · on-premises marked “coming soon”
Read 29 Sep 2026 · acunetix.com
On the record
- Application coverage
- It supports scanning single page applications, JavaScript heavy applications, REST, GraphQL, and SOAP APIs, including authenticated user flows.acunetix.com · read 29 Sep 2026
- Desktop platforms
- The installation guide supports Microsoft Windows and several Linux distributions, including Ubuntu, SUSE, Kali, CentOS, Red Hat, and Oracle Linux.acunetix.com · read 29 Sep 2026
- FIPS limitation
- Acunetix says it is compatible with systems using FIPS policy but does not have FIPS certification or verification.acunetix.com · read 29 Sep 2026
- Integrations
- Listed issue tracker integrations include Jira, Microsoft TFS (Azure DevOps), GitHub, GitLab, Bugzilla, and Mantis; Acunetix Premium also has Jenkins integration.acunetix.com · read 29 Sep 2026
- Product identity
- Acunetix is now Invicti Web + API, a dynamic application security testing product for web applications and APIs.acunetix.com · read 29 Sep 2026
- Proof based validation
- Proof based scanning can safely validate vulnerabilities and provide evidence of exploitability to help reduce false positives.acunetix.com · read 29 Sep 2026
- Risk scoring
- Its AI driven risk scoring uses more than 200 signals to predict risk before scanning begins.acunetix.com · read 29 Sep 2026
- Security
- Acunetix 360 On-Demand says data transfers, stored data, and backups use TLS 1.2, SSL certificates, and 256-bit AES encryption.acunetix.com · read 29 Sep 2026
- Support
- The pricing page says all subscriptions include standard support with rapid response times.acunetix.com · read 29 Sep 2026
- Target limits
- A target is defined as a fully qualified domain name, and subdomains and ports count as different targets.acunetix.com · read 29 Sep 2026
- Trial access
- The pricing page offers no-risk Proof of Concept licenses to try the complete solution in an organization's environment before commitment.acunetix.com · read 29 Sep 2026
- Vulnerability coverage
- The product says it identifies more than 7,000 issues, including OWASP Top 10, OWASP API Top 10, and business logic flaws.acunetix.com · read 29 Sep 2026
- What it does
- The product scans running web applications and APIs to identify exploitable vulnerabilities.acunetix.com · read 29 Sep 2026
- Who it is for
- The company describes its application security testing tool as built to help small and mid-size organizations manage web security.acunetix.com · read 29 Sep 2026
