Acunetix
Acunetix: Web and API security testing with proof-based validation, CI/CD support, and optional AcuSensor IAST. Ranked #6 of 15 in Interactive Application Security Testing Software by our editors (8.6/10); pricing: Pricing on request; best for web and API teams needing validation.
At a glance
- Editor score8.6 / 10
- PricingPricing on request
- Best forWeb and API teams needing validation
- Founded2005 · Austin, Texas, United States
- Facts checked20 Sep 2026
Where it wins
- AcuSensor adds interactive testing with runtime application information.
- Authenticated scanning covers web apps plus REST, SOAP, and GraphQL APIs.
- CI/CD, issue trackers, and REST API support fit existing workflows.
Where it doesn't
- Pricing is quote-based rather than published by plan.
- On-premises deployment is listed as coming soon in the current plan.
- Its primary emphasis remains web and API scanning over core IAST.
Our verdict on Acunetix
Acunetix is a web application and API security testing product from Invicti, now branded as Invicti Web + API. It is aimed at teams that need authenticated testing, vulnerability discovery, proof-based validation, and integration with development workflows. Its optional AcuSensor component adds interactive application security testing by instrumenting supported applications and supplying runtime information to the scanner. The product supports web, Windows, Linux, API, and self-hosted environments, with coverage for PHP, Java, ASP.NET/.NET, and Node.js.
The published Web + API plan includes proof-based scanning, stateful API security, CI/CD automation, SSO, and cloud hosting. Pricing is quote-based, so purchasing requires contact with sales. On-premises deployment is listed as coming soon in the current plan, while official documentation describes Acunetix 360 On-Premises. The product also supports cloud or on-premises deployment options, giving organizations a path to align deployment with their environment. Teams comparing plans should focus on deployment requirements, authentication needs, API coverage, and whether AcuSensor is needed for interactive testing.
Integration breadth is a practical strength. Acunetix supports Jenkins, Azure DevOps, Bamboo, GitLab, Jira, GitHub, Bugzilla, and Mantis, alongside a REST API for custom integrations. It can also connect with platforms and security tools including MuleSoft Anypoint Exchange, Apigee API hub, Amazon API Gateway, Kubernetes, Imperva SecureSphere, F5 BIG-IP Application Security Manager, and FortiWeb WAF. Choose it when web and API validation, authenticated scanning, and proof-based findings are central requirements. Teams seeking a product centered more narrowly on core IAST should compare alternatives with a stronger IAST-first focus.
Your product? Our editors can test Acunetix in depth and publish a review, labelled as paid · from $149/mo →
Acunetix pricing
All 1 Acunetix plans and prices →
Acunetix fact sheet
| Free plan | Not verified |
|---|---|
| Paid from | Not verified |
| Runtime targets | Not verified |
| Deployment | Hybrid |
| Authenticated testing | Yes |
| API testing | Yes |
| Instrumentation | Agent |
| CI/CD integration | Yes |
| Language coverage | PHP, Java, ASP.NET/.NET, Node.js |
| Deployment | Cloud, Self-hosted |
| Platforms | Web, Windows, Linux |
| Compliance & security | GDPR, 2FA |
| Support | Tickets, Docs |
| Built for | Small business, Mid-market, Enterprise (editorial estimate) |
| Integrations | 16 integrations: Jenkins, Azure DevOps, Bamboo, GitLab, Jira, GitHub … See all → |
| Pricing | Pricing on request (source) |
| Website | acunetix.com |
| Facts checked | 20 Sep 2026 |
Acunetix integrations
Acunetix lists 16 integrations on its own site.
- Jenkins
- Azure DevOps
- Bamboo
- GitLab
- Jira
- GitHub
- Bugzilla
- Mantis
- MuleSoft Anypoint Exchange
- Apigee API hub
- Amazon API Gateway
- Kubernetes
- Imperva SecureSphere
- F5 BIG-IP Application Security Manager
- FortiWeb WAF
- Citrix WAF
See all Acunetix integrations →
Alternatives to Acunetix
- New Relic IASTFocused web IAST with exploit validation, remediation context, and CI/CD integration.9.3
- Datadog Runtime Code Analysis (IAST)Priced IAST for Datadog APM customers, with confirmed findings and code-level context.9.1
- HCL AppScanBroad AppSec coverage with IAST, free access, and integrations across development workflows.9.0
See all Acunetix alternatives →
Acunetix vs the competition
- Acunetix vs New Relic IAST
- Acunetix vs Datadog Runtime Code Analysis (IAST)
- Acunetix vs HCL AppScan
- Acunetix vs Black Duck Seeker
- Acunetix vs Contrast Assess
- Acunetix vs OpenText Fortify on Demand
Compare Acunetix with any tool side by side →
Also Ranked In
Acunetix is ranked in 4 of our directories.
Used Acunetix? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used Acunetix for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
Acunetix is listed in our Interactive Application Security Testing Software directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/acunetix/"><img src="https://www.itechguides.com/best/badge/acunetix.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update