Acunetix by Invicti vs. Tinfoil API Security Testing

Acunetix by Invicti

Tinfoil API Security Testing

Overview
Product	Rating	Most Used By	Product Summary	Starting Price
Acunetix by Invicti	Score 8.0 out of 10	N/A	AcuSensor from Maltese company Acunetix is application security and testing software.	$4,500
Tinfoil API Security Testing	Score 0.0 out of 10	N/A	Tinfoil API Security Testing is a solution that enables the user to detect API security risks in web, mobile, and IoT apps and services, now from Synopsys since the January 2020 acquisition.	N/A

Pricing

Acunetix by Invicti

Tinfoil API Security Testing

Editions & Modules

Websites Scanned: 5: 4,500
Websites Scanned: 6-10: 7,200
Websites Scanned: 11-20: 10,800
Websites Scanned: 21-35: 22,540
Websites Scanned: 36-50: 26,600
Websites Scanned: Over 50: Contact for quote

No answers on this topic

Offerings

Pricing Offerings
Acunetix by Invicti	Tinfoil API Security Testing
Free Trial
Yes	No
Free/Freemium Version
No	No
Premium Consulting/Integration Services
No	No

Entry-level Setup Fee

No setup fee

Optional

Additional Details

—

Contact the Synopsys Software Integrity Group (SIG) Sales team at https://www.synopsys.com/software-integrity/contact-sales.html for more detailed pricing information.

More Pricing Information

Community Pulse
	Acunetix by Invicti	Tinfoil API Security Testing
Considered Both Products	Acunetix by Invicti Rahul Deshmukh Security Solutions Architect Chose Acunetix by Invicti In my opinion Acunetix fares good in DevSecOps pipeline better than Appspider. In terms of vulnerabilities scanning of dynamic applications I liked Rapid7, however we have better ROI with Acunetix. During 6 months of usage I tried to look into cost benefit analysis and could … Incentivized Helpful? AE Allan Crittenden Edwards Security Analyst Chose Acunetix by Invicti ZAP is a free tool, and adequate. But it is to that extent less friendly. I would not be as confident of the results and it definitely can't produce reports on par with Acunetix. There would be a lot of legwork on our end if we desired to switch to this tool. Incentivized Helpful? Aaron Bryson Director - Red Team (Application, Mobile, Cloud, IoT security, etc.) Chose Acunetix by Invicti Every year, we re-evaluate the tools we are using and licensing. We balance the ever-changing vendor licensing-models, costs, tool features/usability, etc. For the last few years, this has been the best overall commercial tool for our specific use case. However, this is only … Incentivized Helpful?	Tinfoil API Security Testing No answer on this topic

Best Alternatives
	Acunetix by Invicti	Tinfoil API Security Testing
Small Businesses	GitLab Score 8.8 out of 10	GitLab Score 8.8 out of 10
Medium-sized Companies	Veracode Score 8.7 out of 10	Veracode Score 8.7 out of 10
Enterprises	Veracode Score 8.7 out of 10	Veracode Score 8.7 out of 10
All Alternatives	View all alternatives	View all alternatives

User Ratings
	Acunetix by Invicti	Tinfoil API Security Testing
Likelihood to Recommend	9.0 (0 ratings)	- (0 ratings)

User Testimonials
	Acunetix by Invicti	Tinfoil API Security Testing
Likelihood to Recommend	Acunetix scales well from a small web development presence like ours to a full-scale enterprise focused on that. The various tools and sensors that provide assurance of the results and can give feedback down to the lines of code in the source are proof of this. Various integrations exist as well. The main thing for us is that it simplifies confirming and remediating potential issues in our code or proving that products we use have issues that we can then take to the vendor for correction. Incentivized AE Allan Crittenden Edwards Security Analyst Read full review	No answers on this topic
Pros	Integration of tool with different IDE is great Easy to scan code and identify vulnerabilities Dashboard is easy to customise Incentivized Rahul Deshmukh Security Solutions Architect Read full review	No answers on this topic
Cons	Does not support multiple endpoints well (e.g. apps and services that do not reside at the same URL). Has authentication problems with modern enterprise apps which involve a lot of redirects to unrelated endpoints, federated IDs, SSO, etc. This is related to the first point. The vulnerability detection capability is not as robust as Burp Suite Pro + extensions, Metasploit + auxiliary modules, Nmap + scripts, etc. Incentivized Aaron Bryson Director - Red Team (Application, Mobile, Cloud, IoT security, etc.) Read full review	No answers on this topic
Alternatives Considered	In my opinion Acunetix fares good in DevSecOps pipeline better than Appspider. In terms of vulnerabilities scanning of dynamic applications I liked Rapid7, however we have better ROI with Acunetix. During 6 months of usage I tried to look into cost benefit analysis and could easily pick Acunetix and in terms of dashboards also I am impressed Incentivized Rahul Deshmukh Security Solutions Architect Read full review	No answers on this topic
Return on Investment	Saved money compared to other commercial scanners, especially over the long run. Scan speed seems to be pretty good compared to some of the bulkier commercial products out there. However, that largely has to do with proper configuration. A downside is that is requires a bit of extra work just to get it set up to scan APIs, web services, etc. Incentivized Aaron Bryson Director - Red Team (Application, Mobile, Cloud, IoT security, etc.) Read full review	No answers on this topic
ScreenShots	Acunetix by Invicti Screenshots