Try our new research platform with insights from 80,000+ expert users

Acunetix vs Rapid7 Metasploit comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Jan 12, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Acunetix
Ranking in Vulnerability Management
21st
Average Rating
7.8
Reviews Sentiment
7.0
Number of Reviews
31
Ranking in other categories
Application Security Tools (16th), Static Application Security Testing (SAST) (13th), DevSecOps (6th)
Rapid7 Metasploit
Ranking in Vulnerability Management
19th
Average Rating
7.8
Reviews Sentiment
7.2
Number of Reviews
20
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of January 2025, in the Vulnerability Management category, the mindshare of Acunetix is 1.2%, down from 1.3% compared to the previous year. The mindshare of Rapid7 Metasploit is 1.9%, up from 1.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Vulnerability Management
 

Featured Reviews

AnubhavGoswami - PeerSpot reviewer
Attractive automated reports with boost user productivity and an easy setup
The primary use is mainly related to vulnerability assessment, including both public and internal IP addresses By using this tool, we have reduced the workload and increased the productivity of users. It generates automated reports. This feature is beneficial when sharing reports with clients as…
Mani Bommisetty - PeerSpot reviewer
Comprehensive insights with robust vulnerability detection and streamlined alert management
Rapid7 has a significant advantage in providing a clear picture of my environment. It provides insight and incident detection response capabilities. When deployed with the same agent in servers or endpoints, it identifies vulnerabilities and monitors data transmission to external sources. Rapid7 offers comprehensive features within one platform, eliminating the need to integrate multiple tools to see all alerts in one place.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"It can operate both as a standalone and it can be integrated with other applications, which makes it a very versatile solution to have."
"Overall, it's a very good tool and a very good engine."
"One of the features that I feel is groundbreaking, that I would like to see expanded on, is the IAS feature: The Interactive Application Security Testing module that gets loaded onto an application on a server, for more in-depth, granular findings. I think that is really neat. I haven't seen a lot of competitors doing that."
"The scalability is good. The scalability is more than good because it can operate both as a standalone and it can be integrated as part of applications. So that really makes it a very, very versatile solution to have."
"Acunetix is the best service in the world. It is easy to manage. It gives a lot of information to the users to see and identify problems in their site or applications. It works very well."
"It generates automated reports."
"For us, the most valuable aspect of the solution is the log-sequence feature."
"Acunetix has an awesome crawler. It gives a referral site map of near targets and also goes really deep to find all the inputs without issues. This was valuable because it helped me find some files or directories, like web admin panels without authentication, which were hidden."
"Rapid7 Metasploit is a useful product."
"The most valuable feature for us is the support for testing Linux-based web server components."
"Technical support has been helpful and responsive."
"All of the features are great."
"The Search Engineering feature is good."
"It is scalable. It's in line with our needs."
"The greatest advantage of Rapid7 Metasploit is that it is the only system that can directly exploit vulnerabilities on the Metasploit platform."
"Rapid7 offers comprehensive features within one platform, eliminating the need to integrate multiple tools to see all alerts in one place."
 

Cons

"Currently only supports web scanning."
"The solution's pricing could be better."
"The solution can be improved by adding the ability to scan subdomains automatically, and by providing reports that can be exported to external databases to share with other solutions."
"In terms of what needs improvement, the way the licensing model is currently is not very convenient for us because initially, when we bought it, the licensing model was very flexible, but now it restricts us."
"The solution is generally stable, however, there might be room for improvement regarding glitches or bugs."
"The cost can be reduced as management has noted it to be on the higher side."
"The jargon used makes it difficult for project managers to understand the issues, and the technical explanations used make it difficult for developers to understand issues. These things should be simplified much more. That would be very helpful for us when explaining to them what needs to be fixed. The report output needs to be simplified."
"We have had issues during upgrades where their scans worked on some apps better with previous versions. Then, we had to work with their tech support, who were great, to get it fixed for the next version."
"The solution is not user-friendly and has room for improvement."
"There are numerous outdated exploits in their database that should be updated."
"Rapid7 Metasploit could be made easier for new users to learn."
"If your company's patch is not up to date, but you have other detection or defense solutions such as endpoint detection and response and antivirus software, the product exploit may not work effectively. This is because its exploit database update process is slow and not real-time. For zero-day vulnerabilities or new security threats, relying on Rapid7 Metasploit alone may not be effective."
"Metasploit cannot be installed on a machine with an antivirus."
"At the time I was using it, the graphical user interface needed some improvements."
"The solution is not very scalable, it does not provide any automation to be able to scale it."
"The database is not always updated with the latest vulnerabilities or zero-day exploits."
 

Pricing and Cost Advice

"Acunetix was around the same price as all the other vendors we looked at, nothing special."
"The solution is expensive."
"The pricing is a little high, and moreover, it's kind of domain-based."
"When we looked at all other vendors and what they were asking for, to provide a third of what Acunetix was capable of doing, it was an easy decision... But now that it's coming to a cost where it's line with market value, it becomes more of a competition... Acunetix is raising the cost of licensing. It's 3.5 times what we were initially quoted."
"The costs aren't very expensive. It costs around $3000 or $4000."
"I would say that Acunetix is expensive because there are products on the market with similar features that are equally or better-priced."
"All things considered, I think it has a good price/value ratio."
"When compared with other products, the pricing is a little bit high. But it gives value for the price. It serves the purpose and is worthwhile for the price we pay."
"It is a reasonably priced solution. I would rate it from five out of ten."
"There are two versions available, one of which is the Pro version, and the other is the free version."
"The pricing structure involves a one-time purchase cost of approximately twenty thousand dollars or euros for all customers."
"On a scale of one to ten, where one is cheap and ten is expensive, I rate the product's pricing a six. So it's fairly priced."
"The cost is approximately $15 per device."
"I use the open-source version of this product. Pricing is not relevant."
"Rapid7 Metasploit is an open-source solution."
"We pay monthly. The pricing is reasonable."
report
Use our free recommendation engine to learn which Vulnerability Management solutions are best for your needs.
831,158 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
17%
Financial Services Firm
13%
Government
9%
Manufacturing Company
8%
Computer Software Company
19%
Financial Services Firm
10%
Manufacturing Company
9%
Educational Organization
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
 

Questions from the Community

What do you like most about Acunetix Vulnerability Scanner?
The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code.
What is your primary use case for Acunetix Vulnerability Scanner?
I use Acunetix for penetration testing purposes. This is the primary use case.
What advice do you have for others considering Acunetix Vulnerability Scanner?
I rate the overall solution nine out of ten. I prefer Acunetix for its more precise and accurate results.
What do you like most about Rapid7 Metasploit?
I use Rapid7 Metasploit for payload generation and Post-Exploitation.
What needs improvement with Rapid7 Metasploit?
The reporting feature needs improvement. The time taken to fetch reports based on the number of events can be extensive, unlike Tenable, which is more user-friendly and faster. Additionally, networ...
 

Also Known As

AcuSensor
Metasploit
 

Learn More

 

Overview

 

Sample Customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
City of Corpus Christi, Diebold, Lumenate, Nebraska Public Power District, Prairie North Regional Health, Apptio, Automation Direct, Bob's Stores, Cardinal Innovations Healthcare Solutions, Carnegie Mellon University
Find out what your peers are saying about Acunetix vs. Rapid7 Metasploit and other solutions. Updated: January 2025.
831,158 professionals have used our research since 2012.