Acunetix
Automated web application and API vulnerability scanner, now sold as Invicti Web + API.
Updated · AppBreakup editorial · Web
Is Acunetix free?
No, it's a paid product
- Agentic Pentest plan:
- $500 max per pentest
- Free trial:
- Proof of Concept licence on request
Checked on Acunetix's site Nov 8, 2026
3 alternatives with a free option Full Acunetix pricing and plansSwitch from Acunetix to
All 6
Burp SuiteStarting price: $499 (Burp Suite Professional)
ZAPOpen source
DetectifyStarting price: From €2,500 per year (Standard)
- Verified facts
- 7 of 7
- Alternatives ranked
- 6
- Approved reviews
- 0
- Visits sent from here
- 0
About Acunetix
Acunetix is a long-running dynamic application security testing (DAST) scanner for websites and APIs. It crawls an application, attacks it the way an outsider would, and reports issues such as SQL injection, cross-site scripting and misconfigurations, using proof-based checks to confirm many findings are really exploitable and cut false positives. It can test REST, GraphQL and SOAP APIs and plug results into CI/CD pipelines and ticketing tools. Acunetix has been owned by Invicti Security for years and has now been renamed Invicti Web + API, though the acunetix.com site and name are still widely used. It is the lighter, scanner-focused product in the family, aimed at small and mid-sized security teams, while the full Invicti platform adds static analysis and dependency scanning. Pricing is quote-based per target. Teams that want to test apps by hand will still pair it with a proxy such as Burp Suite or ZAP.
Best for: Security teams that want automated, low-noise scanning of web apps and APIs.
Acunetix pricing (checked Nov 8, 2026)
Each line is quoted from Acunetix's own site, with the page it came from.
| Plan or term | What it says | Checked | Source |
|---|---|---|---|
| Agentic Pentest plan | $500 max per pentest | Nov 8, 2026 | acunetix.com |
| Web + API plan | Quote-based | Nov 8, 2026 | acunetix.com |
| Free trial | Proof of Concept licence on request | Nov 8, 2026 | acunetix.com |
Pros and cons
What works
- Proof-based scanning confirms many findings automatically
- Tests REST, GraphQL and SOAP APIs
- CI/CD and issue tracker integrations
- Large check library covering the OWASP Top 10
Why people leave
- Quote-only pricing per target
- Rebrand to Invicti Web + API makes the product line confusing
- Automated scanning only; no manual testing proxy
Acunetix vs Burp Suite, ZAP and Detectify
From each app's listing and the prices verified on its own site. A dash means we haven't verified it yet.
| Attribute | Acunetix | Burp Suite | ZAP | Detectify |
|---|---|---|---|---|
| Pricing | Paid | Free plan + paid | Open source | Paid |
| Verified price | $500 max per pentest | $499 (Burp Suite Professional) | — | From €2,500 per year (Standard) |
| Free plan | No | Yes, Community Edition | Free app | Yes, Starter from €0, up to 5 users |
| Open source | No | No | Yes | No |
| Self-hostable | No | No | No | No |
| Platforms | Web | Windows, macOS, Linux | Windows, macOS, Linux | Web |
Top Acunetix alternatives
See all 6- 1Burp Suite68.8
Combines a capable automated scanner with the manual testing tools most web pentesters already use.
- 2ZAP64.8
Free, open-source web app scanner with active scanning, spidering and CI automation, no licence needed.
- 3Detectify61.8
SaaS scanner driven by payloads from ethical hackers, plus external attack-surface monitoring of your domains.
- 4
Tenable Nessus59.4Broader vulnerability scanner for hosts and networks, if you need infrastructure coverage beyond web apps.
- 5
Invicti57.5Sister product from the same company, adding proof-based scanning and enterprise workflow for larger teams.
Why people left Acunetix
In reviewers' own words, from reviews of the apps they moved to. These are their opinions, not ours.
No switching stories yet. If you moved away from Acunetix, review the app you switched to and tell us why.
Reviews
No approved reviews yet. How we verify reviewers
Write a review of Acunetix
Acunetix: common questions
What is Acunetix?
Acunetix: Automated web application and API vulnerability scanner, now sold as Invicti Web + API. Best for security teams that want automated, low-noise scanning of web apps and APIs. Available for Web.
Is Acunetix free?
No, Acunetix is a paid product. Agentic Pentest plan: $500 max per pentest (checked on Acunetix's own site).
How much does Acunetix cost?
Acunetix is a paid product. Agentic Pentest plan: $500 max per pentest; Web + API plan: Quote-based; Free trial: Proof of Concept licence on request. Checked on Acunetix's own site, November 2026.
Does Acunetix have a free trial or refund?
Free trial: Proof of Concept licence on request. Source: Acunetix's own site.
Is Acunetix open source?
No, Acunetix is not open source. Open-source alternatives include ZAP.
What platforms does Acunetix run on?
Acunetix is available for Web.
What are the best alternatives to Acunetix?
The highest-ranked Acunetix alternatives right now are Burp Suite, ZAP and Detectify. See the full ranked list for pricing, platforms and verified facts.
Acunetix vs Burp Suite: what's the difference?
Acunetix is a paid product; Burp Suite is free with paid plans. Verified prices: Acunetix $500 max per pentest, Burp Suite $499 (Burp Suite Professional). Only Acunetix runs on Web. Only Burp Suite runs on Windows, macOS and Linux.