Acunetix Reviews

I use Acunetix for penetration testing purposes. This is the primary use case.

I mainly configure the tool for web applications, and I evaluate all products on the market. I find it to be one of the most comprehensive tools, with support for manual intervention. It offers support for specific scenarios like CAPTCHA and supports the ability to manage actions and updates from the internet.

The product is really easy to use. It is a useful product. If you are a security engineer and don't have experience in the tool, you can learn it quickly. We are using Acunetix on our XDR process. We use it to scan applications and create reports for the developers. We use the scheduler to schedule scans. We can use a scan simulation to see whether the connection is established correctly. We can see where the issue is. It is great because we can find the bugs. We can create authenticated scans.

The deployment process must be improved. It is difficult to create a proxy connection.

We are doing dynamic code testing with some of our different websites and other applications that we've developed in-house.

Right now, we are doing the basic kick-off the target, control, and see what it comes up with in the report. We haven't done any importing yet.

We are using the Windows onsite solution.

We have had more success with this particular product being able to control our different applications better than some of the other applications that we have used in the past, as far as checking for vulnerabilities. We know our apps are more secure.

It takes a few weeks just to look at the entire process. We take the reports, send it to the business team, who give it the analysts, and then come up with the remediation plan. Afterwards, we scan it again unless there are critical issues, which are done in less time.

The primary use is mainly related to vulnerability assessment, including both public and internal IP addresses.

By using this tool, we have reduced the workload and increased the productivity of users.

We needed it to scan our internal network and web applications. 

Our security team of five people used it. We scheduled some monthly scans for web applications, which were not being used, to check for vulnerabilities and also vulnerabilities on new features.

Where I worked was a big group where there were many agencies under it, and we did the security for all other agencies. With Acunetix, we cut the time to make infrastructures and web applications (for our colleagues) more secure.

For one application with two or three critical vulnerabilities and some other vulnerabilities, it took like a week to remediate issues because the scan and findings were really fast. 

Dynamic application security testing is our primary use case. I don't know if it would be used as a primary solution, but as a supplemental solution, Acunetix is very good for scanning applications and finding vulnerabilities.

We're a global organization. We're a large book publisher around the world. We use it globally: China, Australia, Europe, Asia, India, South America, Canada, and the USA. It's a global solution.

It has been instrumental in supplementing services that we already have. 

It is top-rated and widely employed for conducting security assessments on networks, websites, and applications. It is considered the gold standard for evaluating security measures and identifying vulnerabilities in websites, networks, and applications. The tool's extensive capabilities make it a go-to choice for ensuring security. It is renowned for its comprehensive scanning and assessment of networks and websites, but it is also known for its significant cost, particularly for deploying it on large clusters.

One of its primary features is its ability to offer automated solutions for application security. It comes equipped with an internal applicator, which automatically identifies and addresses vulnerabilities within the program. It then provides insights on how to rectify these issues, even showcasing the payloads and other relevant information in the report. Occasionally, it may generate some false positives, but for the most part, it delivers reports that are approximately 80% accurate. This allows users to manually test the function and ascertain its functionality. It also allows for communication with external entities, vendors, and servers used by the application. This information encompasses server hosting details, the status of open or closed ports, and insights into Indian Palantir, among others. These features make it an invaluable resource for those seeking to comprehensively understand their website's infrastructure and potential vulnerabilities.