Acunetix vs Synopsys Software Risk Manager comparison

Invicti and Black Duck are both solutions in the Static Application Security Testing (SAST) category. Invicti is ranked #13 with an average rating of 8.3, while Black Duck is ranked #34. Additionally, 85% of Invicti users are willing to recommend the solution.

Acunetix

Read 30 Acunetix reviews

4,881 Views
3,835 Comparison Views

85% willing to recommend

Synopsys Software Risk Manager

Read 1 Synopsys Software Risk Manager review

560 Views
446 Comparison Views

0% willing to recommend

Acunetix

Synopsys Software Risk Manager

Comparison Buyer's Guide

Download the report

Executive Summary

We performed a comparison between Acunetix and Synopsys Software Risk Manager based on real PeerSpot user reviews.

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST).

To learn more, read our detailed Static Application Security Testing (SAST) Report (Updated: October 2024).

Buyer's Guide

Static Application Security Testing (SAST)

October 2024

Download the complete report

Helped 815,854 peers since 2012

Categories and Ranking

Acunetix

Ranking in Static Application Security Testing (SAST)

13th

Average Rating

7.6

Reviews Sentiment

7.3

Number of Reviews

Ranking in other categories

Application Security Tools (16th), Vulnerability Management (20th), DevSecOps (6th)

Synopsys Software Risk Manager

Ranking in Static Application Security Testing (SAST)

34th

Average Rating

0.0

Number of Reviews

Ranking in other categories

Software Composition Analysis (SCA) (20th), Application Security Posture Management (ASPM) (6th)

Featured Reviews

AnubhavGoswami

Compliance Manager at Compunnel

Oct 7, 2024

Attractive automated reports with boost user productivity and an easy setup

The primary use is mainly related to vulnerability assessment, including both public and internal IP addresses By using this tool, we have reduced the workload and increased the productivity of users. It generates automated reports. This feature is beneficial when sharing reports with clients as…

Read full review

Saravanan_Radhakrishnan

Senior Manager at Happiest Minds Technologies

Sep 27, 2023

Facilitates continuous assessment of applications, covering both static and dynamic security aspects

The requirements are in such a place where the customers want to do a continuous assessment of their applications. The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys…

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The vulnerability scanning option for analyzing the security loopholes on the websites is the most valuable feature of this solution."

"It generates automated reports."

"Their technical support has been very active. If I have an issue, I can reach out to them and get an answer pretty quick."

"The usability and overall scan results are good."

"Acunetix has an awesome crawler. It gives a referral site map of near targets and also goes really deep to find all the inputs without issues. This was valuable because it helped me find some files or directories, like web admin panels without authentication, which were hidden."

"The scalability is good. The scalability is more than good because it can operate both as a standalone and it can be integrated as part of applications. So that really makes it a very, very versatile solution to have."

"The product is really easy to use."

"For us, the most valuable aspect of the solution is the log-sequence feature."

More Acunetix pros

"The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys is a Gartner leader, so I position this particular technology for the technical pre-sales part of it."

Cons

"We want to see how much bandwidth usage it consumes. When we monitor traffic we have issues with the consumption and throttling of the traffic."

"Currently only supports web scanning."

"It should be easier to recreate something manually, with the manual tool, because Acunetix is an automatic tool. If it finds something, it should be easier to manually replicate it. Sometimes you don't get the raw data from the input and output, so that could be improved."

"The solution limits the number of scans. It would be much better if we could have unlimited scans."

"There is room for improvement in website authentication because I've seen other products that can do it much better."

"In terms of what needs improvement, the way the licensing model is currently is not very convenient for us because initially, when we bought it, the licensing model was very flexible, but now it restricts us."

"You can't actually change your password after you've set it unless you go back into the administration account and you change it there. Thus, if you're locked out and don't remember your password, that's a thing."

"The vulnerability identification speed should be improved."

More Acunetix cons

"The initial setup is a bit challenging because things are not easy. It needs a lot of technology adaptability plus the customer's environment-specific use cases."

Pricing and Cost Advice

"The solution is expensive."

"It is a bit expensive. If you need to check five applications, you have to pay almost 14,000. It is an agreement for two years at 7,000 per year for only five applications. You cannot change the applications in the license. So, you are stuck with the same license for the five applications for one full year."

"I would say that Acunetix is expensive because there are products on the market with similar features that are equally or better-priced."

"The pricing and licensing are reasonable to a point. In order to run multiple scans at a time, we are going to have to purchase a 100 count license, which is an overkill. Though, compared to what we were paying for, the cost seems reasonable."

"Implementing Acunetix needs a medium or larger business agency, because you need some money to get Acunetix. It is costly, but if you care about your agency's security, then maybe it's a cost that might help you in the future."

"Acunetix was around the same price as all the other vendors we looked at, nothing special."

"The pricing is a little high, and moreover, it's kind of domain-based."

"All things considered, I think it has a good price/value ratio."

More Acunetix pricing and cost advice

"It is more of an enterprise solution for budget-conscious customers. So, it's moderately priced. It's not for everybody."

See which vendors are best for you

Use our free recommendation engine to learn which Static Application Security Testing (SAST) solutions are best for your needs.

See recommendations

815,854 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Computer Software Company

17%

Financial Services Firm

13%

Government

Manufacturing Company

Financial Services Firm

18%

Manufacturing Company

13%

Computer Software Company

13%

Government

10%

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

No data available

Questions from the Community

What do you like most about Acunetix Vulnerability Scanner?

The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code.

See all answers

What is your primary use case for Acunetix Vulnerability Scanner?

The primary use is mainly related to vulnerability assessment, including both public and internal IP addresses.

See all answers

What advice do you have for others considering Acunetix Vulnerability Scanner?

I would generally recommend Acunetix to any organization in the IT-enabled sector. However, I have not worked for a non-IT organization, so I cannot comment on that. I'd rate the solution nine out ...

See all answers

What do you like most about Synopsys Code Dx?

The customers were looking for something around static security and dynamic security, and in all those areas, they were looking for an industry leader with a proven solution. Synopsys is a Gartne...

See all answers

What is your experience regarding pricing and costs for Synopsys Code Dx?

I would rate the pricing model an eight out of ten, where one is low and ten is high. Because it is more of an enterprise solution for budget-conscious customers. So, it's moderately priced. It's n...

See all answers

What needs improvement with Synopsys Code Dx?

Code Dx lacks one aspect, the dynamic security part, known as DAST. It's not an on-premise solution; it's in the cloud now. There are compliance standards and data standards where the customer migh...

See all answers

Comparisons

OWASP Zap vs Acunetix

Compared 16% of the time

PortSwigger Burp Suite Professional vs Acunetix

Compared 11% of the time

HCL AppScan vs Acunetix

Compared 10% of the time

Tenable.io Web Application Scanning vs Acunetix

Compared 8% of the time

PortSwigger Burp Suite Enterprise Edition vs Acunetix

Compared 7% of the time

More Acunetix Competitors

Veracode vs Synopsys Software Risk Manager

Compared 62% of the time

Checkmarx One vs Synopsys Software Risk Manager

Compared 28% of the time

SonarQube Server (formerly SonarQube) vs Synopsys Software Risk Manager

Compared 10% of the time

More Synopsys Software Risk Manager Competitors

Product Reports

Buyer's Guide

Acunetix

November 2024

Download Acunetix product report

Buyer's Guide

Application Security Posture Management (ASPM)

October 2024

Download Synopsys Software Risk Manager product report

Also Known As

AcuSensor

Code Dx

Learn More

Invicti

Black Duck

Overview

Acunetix Web Vulnerability Scanner is an automated web application security testing tool that audits your web applications by checking for vulnerabilities like SQL Injection, Cross site scripting, and other exploitable vulnerabilities.

Software Risk Manager is an application security posture management (ASPM) solution that enables security and development teams to manage their application security programs at enterprise scale. By unifying policy, test orchestration, correlation, prioritization, and built-in static application security testing (SAST) and software composition analysis (SCA) engines, organizations can streamline their security activities across the enterprise.

Sample Customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand

Discover why companies like: CGI said, "Synopsys and Software Risk Manager have provided the results we’re looking for".

Buyer's Guide

Static Application Security Testing (SAST)

October 2024

Download Free Report

Find out what your peers are saying about Sonar, Veracode, Checkmarx and others in Static Application Security Testing (SAST). Updated: October 2024.

DOWNLOAD NOW

815,854 professionals have used our research since 2012.

See our list of best Static Application Security Testing (SAST) vendors.

We monitor all Static Application Security Testing (SAST) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.