ImmuniWeb
ImmuniWeb: A compliance-focused scanner for authenticated web applications, APIs and CI/CD workflows. Ranked #19 of 29 in Web Application Security Scanners by our editors (7.6/10); pricing: Free plan; best for compliance-focused security teams.
At a glance
- Editor score7.6 / 10
- PricingFree plan
- Best forCompliance-focused security teams
- Free planYes
- Paid from€595/yr
- Authenticated scansYes
- Founded2014 · Geneva, Switzerland
- Facts checked19 Sep 2026
Where it wins
- Supports authenticated SSO and MFA scans for modern web applications.
- Covers REST, GraphQL and SOAP APIs with common schema formats.
- Combines compliance mapping, CVSSv4 and patch verification rescans.
Where it doesn't
- Paid pricing is calculated per target, starting at €395 monthly.
- The Community Edition covers selected tests rather than the premium subscription.
- Its focus is application security, not broad IT observability.
Our verdict on ImmuniWeb
ImmuniWeb is an application security platform for organizations assessing web applications, APIs, microservices and cloud environments. Its Neuron product supports authenticated scanning with SSO and MFA, JavaScript and single-page application crawling, API testing, scheduled scans and CI/CD-triggered workflows. It is particularly suited to security teams that need compliance-ready reports, regulatory mapping and risk-based findings alongside vulnerability discovery. A no-cost Community Edition provides selected cybersecurity, privacy and compliance tests, while the paid subscriptions provide the broader Neuron feature set.
Pricing is organized around scan subscriptions billed per target. The Monthly Scan Subscription costs €395 per target monthly, and the Annual Scan Subscription costs €595 per target annually. Both paid plans include unlimited scans per target, scheduled or manual scanning and CI/CD-triggered scanning. The platform also connects with GitHub Actions, GitLab CI and Jenkins, supporting DevSecOps workflows without limiting scanning to a single deployment pattern. Hybrid deployment is part of its positioning, which can suit teams managing both internal and external applications.
The product’s strongest differentiator is coverage across authenticated applications, modern JavaScript interfaces and structured APIs. OpenAPI, Swagger and Postman schema support extend its reach beyond conventional website crawling, while CVE/CWE mapping, CVSSv4 scoring, compliance reports and patch verification rescans help connect findings with remediation work. RBAC multiuser dashboards add a collaboration layer for security teams. Organizations needing application and API security with compliance context should shortlist ImmuniWeb; teams seeking general infrastructure monitoring or a flat, non-target-based pricing model should look elsewhere.
Your product? Our editors can test ImmuniWeb in depth and publish a review, labelled as paid · from $149/mo →
ImmuniWeb pricing
All 2 ImmuniWeb plans and prices →
ImmuniWeb fact sheet
| Free plan | Yes |
|---|---|
| Paid from | €595/yr |
| Deployment | Hybrid |
| Authenticated scans | Yes |
| JavaScript crawling | Yes |
| Scheduled scans | Yes |
| Compliance reports | Yes |
| API scanning | Yes |
| Target limit | Not verified |
| Deployment | Cloud |
| Platforms | Web |
| Integrations | 3 integrations: GitHub Actions, GitLab CI, Jenkins |
| Pricing | Free plan (source) |
| Website | immuniweb.com |
| Facts checked | 19 Sep 2026 |
ImmuniWeb integrations
ImmuniWeb lists 3 integrations on its own site.
- GitHub Actions
- GitLab CI
- Jenkins
Alternatives to ImmuniWeb
- ZeroThreatDeep web and API coverage with flexible free, cloud, pay-per-scan, and on-premises options.9.4
- Burp Suite DASTBroad, enterprise-focused DAST for authenticated web apps, APIs, and CI/CD workflows.9.3
- EscapeDeep testing for complex applications, APIs, workflows, and access controls.9.2
See all ImmuniWeb alternatives →
Also Ranked In
ImmuniWeb is ranked in 4 of our directories.
Used ImmuniWeb? Be the first to review it
The editor score above is our own research. What this page doesn't have yet is a reader's view — what you used ImmuniWeb for, what worked and what didn't. No stars are seeded and no review is paid for; an editor reads every one before it appears.
Write a reviewTwo minutes · verified accounts only · read by an editor before it appears
Featured on iTechGuides
ImmuniWeb is listed in our Web Application Security Scanners directory. Add the badge to your site — it links back to this page.
<a href="https://www.itechguides.com/products/immuniweb/"><img src="https://www.itechguides.com/best/badge/immuniweb.svg" alt="Featured on iTechGuides" width="230" height="46"></a>
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update