Acunetix by Invicti vs. Skybox Security

It is best suited for integrated security testing of applications which are hosted on web servers. The most important thing is the integration of DevSecOps which is crucial in today's fast paced environment of rapid development. The core of Acunetix is application scanning which is really great and I highly recommend this product to everyone

Incentivized

For any customer that has a complex network environment spanning globally, skybox helps manage firewall policy compliance for many vendors quite easy. It has a variety of security and network vendors that it is compatible with in its database.

• Fast.
• Easy-to-use.
• Great customer support.
• Reporting features.
• Supports importing state files from other popular application testing tools.
• Has other features built-in beyond just scanning for vulnerabilities.

Incentivized

• Skybox manages compliance for firewalls better than we have seen with other tools.
• Skybox integrates into standard change management tools so change control can flow through Skybox and assist with all decisions to implement a change.
• The Skybox network map is more detailed than other management tools showing us paths other tools didn't find.

Incentivized

• Configuration of DevSecOps can be improved for ease
• Dashboard can have API integration
• Broaden the scope of vulnerabilities

Incentivized

• User experience. On the first approach, it's not the simplest tool that I have ever used.
• Web-based console. In my honest opinion it's very important [to have] this type of functionality to extend the use of Skybox.
• Too many updates of the product.

Incentivized

It is user friendly and quite easy to use. It centralizes all info in one portal and generates good reports to help you visualize and assess your change management decision

The support team needs to be improved especially in their response and awareness about recent bugs in their solution. For example, sometimes they are not aware about how to integrate specific vendors like Microsoft Azure and they still don't have answers to it until now.

ZAP is a free tool, and adequate. But it is to that extent less friendly. I would not be as confident of the results and it definitely can't produce reports on par with Acunetix. There would be a lot of legwork on our end if we desired to switch to this tool.

Incentivized

CloudGuard Dome9 does not have a suite for an on-premise datacenter.

Incentivized

• Saved money compared to other commercial scanners, especially over the long run.
• Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
• A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Incentivized

• Overall ROI is good as this product is an augmentation for us but we already have a mature security program with an experienced security team so the ROI is high.

Incentivized