Acunetix by Invicti vs Tripwire Enterprise

Likelihood to Recommend

Acunetix scales well from a small web development presence like ours to a full-scale enterprise focused on that. The various tools and sensors that provide assurance of the results and can give feedback down to the lines of code in the source are proof of this. Various integrations exist as well. The main thing for us is that it simplifies confirming and remediating potential issues in our code or proving that products we use have issues that we can then take to the vendor for correction.

Read full review

Allan Crittenden Edwards

Security Analyst

Eastern Michigan UniversityHigher Education, 1001-5000 employees

View all 2 answers on this topic

Tripwire Enterprise is great for hosting/data center environments and it greatly helps where console screenshots and reporting fill a lot of our client internal audit needs for security and change control.

Read full review

Joseph Smith

Senior Systems Engineer

Zwicker & Associates, P.C.Computer Software, 201-500 employees

View all 1 answers on this topic

Pros

Fast.
Easy-to-use.
Great customer support.
Reporting features.
Supports importing state files from other popular application testing tools.
Has other features built-in beyond just scanning for vulnerabilities.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 2 answers on this topic

It allows us to track development changes for engineer accountability.
Tripwire Enterprise also allows us to monitor changes/updates being done to our systems in our hosting centers.
We use the software to track user access and critical system changes.

Read full review

Joseph Smith

Senior Systems Engineer

Zwicker & Associates, P.C.Computer Software, 201-500 employees

View all 1 answers on this topic

Cons

Does not support multiple endpoints well (e.g. apps and services that do not reside at the same URL).
Has authentication problems with modern enterprise apps which involve a lot of redirects to unrelated endpoints, federated IDs, SSO, etc. This is related to the first point.
The vulnerability detection capability is not as robust as Burp Suite Pro + extensions, Metasploit + auxiliary modules, Nmap + scripts, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 2 answers on this topic

In previous versions the management console was a little hard to navigate in some respects.
I'm sure this has changed over time but we hope the reporting system has gotten more granular.
I really don't have to many cons for this product, I recommend it for every company I work for!

Read full review

Joseph Smith

Senior Systems Engineer

Zwicker & Associates, P.C.Computer Software, 201-500 employees

View all 1 answers on this topic

Pricing Details

General

Free Trial

Yes

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

$0

Acunetix by Invicti Editions & Modules

Edition

Websites Scanned: 5	$4,500
Websites Scanned: 6-10	$7,200
Websites Scanned: 11-20	$10,800
Websites Scanned: 21-35	$22,540
Websites Scanned: 36-50	$26,600
Websites Scanned: Over 50	Contact for quote

none

Additional Pricing Details

—

General

Free Trial

—

Free/Freemium Version

—

Premium Consulting/Integration Services

—

Entry-level set up fee?

No

Starting Price

—

Tripwire Enterprise Editions & Modules

—

Additional Pricing Details

—

Alternatives Considered

ZAP is a free tool, and adequate. But it is to that extent less friendly. I would not be as confident of the results and it definitely can't produce reports on par with Acunetix. There would be a lot of legwork on our end if we desired to switch to this tool.

Read full review

Allan Crittenden Edwards

Security Analyst

Eastern Michigan UniversityHigher Education, 1001-5000 employees

View all 2 answers on this topic

Honestly, I haven't used other products to do what Tripwire does, it's always my first recommendation.

Read full review

Joseph Smith

Senior Systems Engineer

Zwicker & Associates, P.C.Computer Software, 201-500 employees

View all 1 answers on this topic

Return on Investment

Saved money compared to other commercial scanners, especially over the long run.
Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Read full review

Aaron Bryson

Director - Red Team (Application, Mobile, Cloud, IoT security, etc.)

Cylance, Inc.Computer & Network Security, 1001-5000 employees

View all 2 answers on this topic

Tripwire has been a positive business impact for us because of its trusted name. Our customers require software like Tripwire because they know their data and security concerns are in good hands when it's deployed.
The ROI for Tripwire is also a positive for our business because of the time and man power saved in due diligence and reporting for our clients' internal auditing.

Read full review

Joseph Smith

Senior Systems Engineer

Zwicker & Associates, P.C.Computer Software, 201-500 employees

View all 1 answers on this topic

Acunetix by Invicti vs Tripwire Enterprise