Acunetix by Invicti vs. VMware AppDefense (discontinued)

It is best suited for integrated security testing of applications which are hosted on web servers. The most important thing is the integration of DevSecOps which is crucial in today's fast paced environment of rapid development. The core of Acunetix is application scanning which is really great and I highly recommend this product to everyone

Incentivized

Being a VMware product, AppDefense has the advantage of compatibility with all of the VMware product feature updates and patches ( ESXi, NSX, vCenter, etc.). Paired with Carbon Black, it's resource overhead is well-tuned compared to traditional antivirus products.

Incentivized

• Fast.
• Easy-to-use.
• Great customer support.
• Reporting features.
• Supports importing state files from other popular application testing tools.
• Has other features built-in beyond just scanning for vulnerabilities.

Incentivized

• I think that the AppDefense approach is clever and sets it apart from other products. Having a baseline of normal behavior that I can see is something I haven't seen in another product before.
• AppDefense doesn't overload my systems with performance draining agents.
• AppDefense integrates with VMWare products I have or plan to purchase.
• Access to AppDefense support has been better than any other VMWare products.

Incentivized

• Configuration of DevSecOps can be improved for ease
• Dashboard can have API integration
• Broaden the scope of vulnerabilities

Incentivized

• PowerShell functionality.
• Sorting results in some areas are not applicable.
• Email alerting through AppDefense Manager does not exist, but support has said it is a feature to come.

Incentivized

The product is still quite new, and there seems to be a lack of technical information available for both the E.U. and support staff. That being said, the support staff that I have worked with have always been very knowledgeable and ensure that they see a ticket through to completion.

Incentivized

ZAP is a free tool, and adequate. But it is to that extent less friendly. I would not be as confident of the results and it definitely can't produce reports on par with Acunetix. There would be a lot of legwork on our end if we desired to switch to this tool.

Incentivized

We have several security applications, but none exactly like VMware AppDefense. That is one of the reasons I like it, as it seems to take a different angle on monitoring and protection. The other apps monitor different things, but one thing AppDefense seems to have over them is a streamlined interface and not a lot of false positives.

Incentivized

• Saved money compared to other commercial scanners, especially over the long run.
• Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration.
• A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc.

Incentivized

• As with everything now, automation is key. AppDefense effectively monitors the activity on all our VMs, freeing administrators to work on more projects
• Makes it much easier to diagnose issues when system are not running as intended

Incentivized