Acunetix vs Skybox Security

Likelihood to Recommend

It is suited well for ad-hoc and scheduled application vulnerability scans. You must review the results to manually filter out false-positives. You must always keep in mind that this is only a vulnerability scan. It can only find a certain class of vulnerabilities, and it can only do that so well. You should definitely not rely on this tool alone for identifying problems. That being said, I have used it along with every other major commercial vulnerability scanner and find it to the best overall ROI compared to more expensive commercial scanners that don't necessarily give you a better user experience or better vulnerability results. I rarely need support from the vendor, but when I do, they have been responsive and able to solve the issue quickly.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

I can't think where Skybox is not appropriate - maybe in smaller companies depending on fund availability. The developers are constantly improving and getting the system to where it needs to be for management of next-generation firewalls and audit support.

Read full review

Alex Waitkus, CISSP-ISSAP, OSCP

Security Architect

Securicon, LLCComputer & Network Security, 51-200 employees

View all 4 answers on this topic

Feature Rating Comparison

Acunetix

Skybox Security

Device Discovery

Policy Compliance Auditing

Attack Path Simulation Testing

Vulnerability Scans

Firewall Rule Cleanup

Pros

Fast.
Easy-to-use.
Great customer support.
Reporting features.
Supports importing state files from other popular application testing tools.
Has other features built-in beyond just scanning for vulnerabilities.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Vulnerability prioritization
Review of firewall rules
Review of routing rules

Read full review

Gabriele Angeli

Senior Security Consultant

Bip - Business Integration PartnersInformation Technology and Services, 1001-5000 employees

View all 4 answers on this topic

Cons

Does not support multiple endpoints well (e.g. apps and services that do not reside at the same URL).
Has authentication problems with modern enterprise apps which involve a lot of redirects to unrelated endpoints, federated IDs, SSO, etc. This is related to the first point.
The vulnerability detection capability is not as robust as Burp Suite Pro + extensions, Metasploit + auxiliary modules, Nmap + scripts, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

A cloud piece/offering would be a good place for improvement.

Read full review

Verified User

Engineer in Information Technology

Non-Profit Organization Management Company, 501-1000 employees

View all 4 answers on this topic

Alternatives Considered

Every year, we re-evaluate the tools we are using and licensing. We balance the ever-changing vendor licensing-models, costs, tool features/usability, etc. For the last few years, this has been the best overall commercial tool for our specific use case. However, this is only one of many tools that we use and need.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Read full review

Verified User

Professional in Information Technology

Airlines/Aviation Company, 1001-5000 employees

View all 4 answers on this topic

Return on Investment

Saved money compared to other commercial scanners, especially over the long run.
Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 1 answers on this topic

Skybox is in pilot
Positive ROI is in change management

Read full review

Alex Waitkus, CISSP-ISSAP, OSCP

Security Architect

Securicon, LLCComputer & Network Security, 51-200 employees

View all 4 answers on this topic

Pricing Details

General

Free Trial

Yes

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Rating Summary

Acunetix

Skybox Security

Acunetix vs Skybox Security

Acunetix

Skybox Security

Feature Rating Comparison

Firewall Security Management

Device Discovery

Policy Compliance Auditing

Attack Path Simulation Testing

Vulnerability Scans

Firewall Rule Cleanup

Pros

Cons

Alternatives Considered

Return on Investment

Screenshots

Pricing Details

General

Free Trial

Free/Freemium Version

Premium Consulting/Integration Services

Entry-level set up fee?

General

Free Trial

Free/Freemium Version

Premium Consulting/Integration Services

Entry-level set up fee?

Rating Summary

Likelihood to Recommend

Add comparison