Acunetix is unclaimed —

Acunetix

Is Your Website Hackable?·acunetix.com

On request · Self-hostable See pricing ↓

Acunetix (now rebranded as Invicti Web + API) is a web application and API security scanner that provides automated dynamic application security testing (DAST). It discovers web apps, APIs, and shadow assets, detects thousands of vulnerability types including OWASP Top 10 and API Top 10 issues, and validates findings with proof-based accuracy to eliminate false positives. It also offers AI-driven risk scoring, remediation guidance, and integrations with CI/CD, ticketing, and WAF tools.

What it's for

Penetration testingWebsite security scanningExternal vulnerability scanningWeb application security testingVulnerability managementCross-site scripting (XSS) detectionSQL injection detectionReflected XSS detectionCSRF attack detectionDirectory traversal detection

Features 19

AcuMonitor Technology
AcuSensor Technology for interactive application testing
Agentic multi-agent attack simulation (Agentic PenTesting)
AI-driven Predictive Risk Scoring using 200+ signals
AI-powered remediation guidance for developers
Authenticated testing across role-based user flows
Automated retesting to confirm vulnerability fixes
Automated web application and API vulnerability scanning
DAST to SAST code-level vulnerability correlation
Detection of OWASP Top 10 and OWASP API Top 10 issues
Discovery of shadow and undocumented APIs
Integrations with CI/CD, ticketing, and communication tools
Macro recording for password-protected/hard-to-reach areas
Malware scanning
Proof-based vulnerability validation with 99.98% confirmation accuracy
Role-based access control (RBAC)
Scanning of SPAs, JavaScript-heavy apps, and LLM-powered services
Stateful testing of REST, GraphQL, and SOAP APIs
Weekly vulnerability database updates

At a glance

free trialself-hostable

TypeWeb app

DeploymentHybrid

PlatformsWeb, Windows, macOS, Linux

ForCTO & CISO, Engineering Manager, Security Engineer, DevSecOps

CompanyAcunetix

Integrations

F5 Big-IP ASMCitrix Web App FirewallAmazon AWS Web Application FirewallImperva SecureSphereDockerMendFortinet FortiWeb

Resources

Docs

Pricing

All plans (Essentials, Professional, Ultimate) require contacting sales for a custom quote; no public prices are listed.

EssentialsQuote

Pricing available only via custom quote; described as 'the foundation for a strong AppSec program'.

ProfessionalQuote

Pricing available only via custom quote; described as scaling AppSec with advanced capabilities and workflows. Some integrations (Communications, PCI ASV) marked 'Coming Soon'.

UltimateQuote

Pricing available only via custom quote; described as 'comprehensive AppSec for enterprises—maximum security and control'. Some features (Dashboards, Communications, PAM & SEM, PCI ASV, SSO Auto-Provisioning) marked 'Coming Soon'.