Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

ImmuniWeb review

Freemium#19 of 29 in Web Application Security ScannersOffensive SecurityAttack Surface Management SoftwareSecurity Ratings Software

A compliance-focused scanner for authenticated web applications, APIs and CI/CD workflows.

7.6/10Editor score
Visit ImmuniWeb
ImmuniWeb7.6 Visit ImmuniWeb

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

ImmuniWeb is an application security platform for organizations assessing web applications, APIs, microservices and cloud environments. Its Neuron product supports authenticated scanning with SSO and MFA, JavaScript and single-page application crawling, API testing, scheduled scans and CI/CD-triggered workflows. It is particularly suited to security teams that need compliance-ready reports, regulatory mapping and risk-based findings alongside vulnerability discovery. A no-cost Community Edition provides selected cybersecurity, privacy and compliance tests, while the paid subscriptions provide the broader Neuron feature set.

Pricing is organized around scan subscriptions billed per target. The Monthly Scan Subscription costs €395 per target monthly, and the Annual Scan Subscription costs €595 per target annually. Both paid plans include unlimited scans per target, scheduled or manual scanning and CI/CD-triggered scanning. The platform also connects with GitHub Actions, GitLab CI and Jenkins, supporting DevSecOps workflows without limiting scanning to a single deployment pattern. Hybrid deployment is part of its positioning, which can suit teams managing both internal and external applications.

The product’s strongest differentiator is coverage across authenticated applications, modern JavaScript interfaces and structured APIs. OpenAPI, Swagger and Postman schema support extend its reach beyond conventional website crawling, while CVE/CWE mapping, CVSSv4 scoring, compliance reports and patch verification rescans help connect findings with remediation work. RBAC multiuser dashboards add a collaboration layer for security teams. Organizations needing application and API security with compliance context should shortlist ImmuniWeb; teams seeking general infrastructure monitoring or a flat, non-target-based pricing model should look elsewhere.

ImmuniWeb pros and cons

  • Where it wins
    • Supports authenticated SSO and MFA scans for modern web applications.
    • Covers REST, GraphQL and SOAP APIs with common schema formats.
    • Combines compliance mapping, CVSSv4 and patch verification rescans.
  • Where it doesn't
    • Paid pricing is calculated per target, starting at €395 monthly.
    • The Community Edition covers selected tests rather than the premium subscription.
    • Its focus is application security, not broad IT observability.

ImmuniWeb fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update