Acunetix by Invicti vs Qualys Cloud Platform

Likelihood to Recommend

It is suited well for ad-hoc and scheduled application vulnerability scans. You must review the results to manually filter out false-positives. You must always keep in mind that this is only a vulnerability scan. It can only find a certain class of vulnerabilities, and it can only do that so well. You should definitely not rely on this tool alone for identifying problems. That being said, I have used it along with every other major commercial vulnerability scanner and find it to the best overall ROI compared to more expensive commercial scanners that don't necessarily give you a better user experience or better vulnerability results. I rarely need support from the vendor, but when I do, they have been responsive and able to solve the issue quickly.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

It is well suited for environments that are looking for a solution that is top notch for vulnerability scanning, and is the most accurate at doing so. It would also fit environments that have a lot of endpoints to scan or like to have scanning done on an automatic basis.It is less appropriate in environments that want to use a platform right away, without getting training in how to use it, or reading documentation on the product.

Read full review

Verified User

Supervisor in Information Technology

Education Management Company, 1001-5000 employees

View all 10 answers on this topic

Pros

Fast.
Easy-to-use.
Great customer support.
Reporting features.
Supports importing state files from other popular application testing tools.
Has other features built-in beyond just scanning for vulnerabilities.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Cloud-based management.
Detailed info about the findings: reason, effect, risk, mitigations, etc.
Clear UI.
Additional modules can be added to the same management interface.(single point of management).

Read full review

Verified User

Engineer in Information Technology

Computer Software Company, 1001-5000 employees

View all 10 answers on this topic

Cons

Does not support multiple endpoints well (e.g. apps and services that do not reside at the same URL).
Has authentication problems with modern enterprise apps which involve a lot of redirects to unrelated endpoints, federated IDs, SSO, etc. This is related to the first point.
The vulnerability detection capability is not as robust as Burp Suite Pro + extensions, Metasploit + auxiliary modules, Nmap + scripts, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Reporting service should be available in excel or csv mode
Panel for vulnerabilities by category in dashboard
Integrated with splunk to monitor the status of missing patch

Read full review

Verified User

Consultant in Customer Service

Computer & Network Security Company, 10,001+ employees

View all 10 answers on this topic

Pricing Details

General

Free Trial

Yes

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

$0

Acunetix by Invicti Editions & Modules

Edition

Websites Scanned: 5	$4,500
Websites Scanned: 6-10	$7,200
Websites Scanned: 11-20	$10,800
Websites Scanned: 21-35	$22,540
Websites Scanned: 36-50	$26,600
Websites Scanned: Over 50	Contact for quote

none

Additional Pricing Details

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

Qualys Cloud Platform Editions & Modules

—

Additional Pricing Details

—

Support Rating

No score

No answers yet

No answers on this topic

Qualys Cloud Platform 8.4

Based on 8 answers

We feel Qualys provides required perimeter security for our infrastructure which is hosted on multiple clouds. Together with a comprehensive scanning and continuous monitoring, Qualys is cloud agnostic which gives us flexibility to use it across multiple clouds. We also like the daily reporting and its integration with other productivity tools.

Read full review

Verified User

Director in Engineering

Computer Software Company, 501-1000 employees

View all 8 answers on this topic

Alternatives Considered

Every year, we re-evaluate the tools we are using and licensing. We balance the ever-changing vendor licensing-models, costs, tool features/usability, etc. For the last few years, this has been the best overall commercial tool for our specific use case. However, this is only one of many tools that we use and need.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Deploying Qualys is really easy, in less than a day you can have everything ready for scanning. Also, Qualys has tons of reports and has tons of extension apps (such as the Asset Management App, which I love).

Read full review

Verified User

Professional in Professional Services

Computer & Network Security Company, 11-50 employees

View all 10 answers on this topic

Return on Investment

Saved money compared to other commercial scanners, especially over the long run.
Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Reduction in time taken up by manual security scanning
Reduction in out-of-policy security issues
Increase in scanning coverage of our technology estate

Read full review

Verified User

Professional in Information Technology

Information Technology & Services Company, 1001-5000 employees

View all 10 answers on this topic

Acunetix by Invicti vs Qualys Cloud Platform