Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

Acunetix review

#6 of 15 in Interactive Application Security Testing SoftwareApplication Security TestingVulnerability Scanner SoftwareWebsite Security Software

Web and API security testing with proof-based validation, CI/CD support, and optional AcuSensor IAST.

8.6/10Editor score
Visit Acunetix
Acunetix8.6 Visit Acunetix

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Acunetix is a web application and API security testing product from Invicti, now branded as Invicti Web + API. It is aimed at teams that need authenticated testing, vulnerability discovery, proof-based validation, and integration with development workflows. Its optional AcuSensor component adds interactive application security testing by instrumenting supported applications and supplying runtime information to the scanner. The product supports web, Windows, Linux, API, and self-hosted environments, with coverage for PHP, Java, ASP.NET/.NET, and Node.js.

The published Web + API plan includes proof-based scanning, stateful API security, CI/CD automation, SSO, and cloud hosting. Pricing is quote-based, so purchasing requires contact with sales. On-premises deployment is listed as coming soon in the current plan, while official documentation describes Acunetix 360 On-Premises. The product also supports cloud or on-premises deployment options, giving organizations a path to align deployment with their environment. Teams comparing plans should focus on deployment requirements, authentication needs, API coverage, and whether AcuSensor is needed for interactive testing.

Integration breadth is a practical strength. Acunetix supports Jenkins, Azure DevOps, Bamboo, GitLab, Jira, GitHub, Bugzilla, and Mantis, alongside a REST API for custom integrations. It can also connect with platforms and security tools including MuleSoft Anypoint Exchange, Apigee API hub, Amazon API Gateway, Kubernetes, Imperva SecureSphere, F5 BIG-IP Application Security Manager, and FortiWeb WAF. Choose it when web and API validation, authenticated scanning, and proof-based findings are central requirements. Teams seeking a product centered more narrowly on core IAST should compare alternatives with a stronger IAST-first focus.

Acunetix pros and cons

  • Where it wins
    • AcuSensor adds interactive testing with runtime application information.
    • Authenticated scanning covers web apps plus REST, SOAP, and GraphQL APIs.
    • CI/CD, issue trackers, and REST API support fit existing workflows.
  • Where it doesn't
    • Pricing is quote-based rather than published by plan.
    • On-premises deployment is listed as coming soon in the current plan.
    • Its primary emphasis remains web and API scanning over core IAST.

Acunetix fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update