Try our new research platform with insights from 80,000+ expert users

Acunetix vs Veracode comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 8, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

ROI

Sentiment score
7.4
Acunetix enhances security by detecting vulnerabilities, improving efficiency, reducing testing dependency, and increasing ROI through operational effectiveness.
Sentiment score
6.6
Veracode enhances code security and quality, saves time and costs, supports compliance, and boosts client trust and retention.
It saves a significant amount of time by covering attack surfaces.
Information Security Engineer at Tübitak Bilgem
I have seen a return on investment, as Acunetix helps reduce the man-days and effort needed for scanning bulk applications through automated assessments.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
I have seen a return on investment with Acunetix, including time saved and cost reduction, because it provides us threats on our web application servers.
Cybersecurity Team Leader at EMAK For Integrated Solutions
The scanners of Veracode bring status of the weaknesses in the current infrastructure. It scans and provides reports regarding the servers, the network, and the applications running on those servers.
Senior Solutions Architect at IDS Comercial
Regarding price, the evaluation should focus on how efficiently they will recover their investment, considering the time saved through the use of Veracode Fix, for example, and the ability to fix code at dev time compared to the problems faced when fixing after the product is already deployed.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
We did see a return on investment with Veracode, as we segregated our remediation efforts, which reduced our time to delivery as well as the number of engineers needed to help us in delivering a secure solution.
DevSecOps Engineer at a tech services company with 11-50 employees
 

Customer Service

Sentiment score
6.6
Acunetix customer service is responsive with varied satisfaction in speed, quality, feature integration, and vulnerability management updates.
Sentiment score
7.2
Veracode support is praised for expertise and responsiveness, but some users report delays and unhelpful interactions with complex issues.
For high-severity issues, they reach out within two to three hours, and for critical issues, a response is received within 15 minutes.
Lead Cybersecurity at TBO
The technical support from Invicti is very good and fast.
Information Security Engineer at Tübitak Bilgem
Support staff not being familiar with the problem.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Access to the engineering team is crucial for faster feedback on the product fix process.
Principal Architect at a consultancy with 11-50 employees
I have communicated with the technical support of Veracode a couple of times, and this was a really great experience because these professionals know their material.
Application Security Specialist at Herrenknecht
They share detailed information via email, including screenshots or further clarification about the issue.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
 

Scalability Issues

Sentiment score
7.1
Acunetix is highly scalable, easily adaptable to various environments, with few scalability concerns, mostly regarding licenses or operating systems.
Sentiment score
7.5
Veracode offers impressive scalability, efficiently handling growth and multiple applications, despite some licensing challenges, earning high user ratings.
Acunetix can handle increasing workloads and more applications easily.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Acunetix's scalability for my growing needs is great; it is a very scalable product compared to others.
Cybersecurity Team Leader at EMAK For Integrated Solutions
Cloud solutions are easier to scale than on-premise solutions.
Senior Solutions Architect at IDS Comercial
It has a good capacity to scale effectively.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
Implementing these features into our normal CI/CD was good, so I can say that scalability is really good.
Application Security Specialist at Herrenknecht
 

Stability Issues

Sentiment score
8.2
Acunetix offers high stability with minimal maintenance, reliable results, rare issues, and varying user stability ratings.
Sentiment score
7.8
Veracode is highly reliable with minimal downtime and issues, though occasional scan speed and false positive concerns exist.
I did not need to reach customer support because the product is very stable.
Cybersecurity Team Leader at EMAK For Integrated Solutions
If the Veracode server is down, we experience many issues during the scan.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
It's not that easy to onboard, but once they have been onboarded on the platform, and the pipeline configured alongside the product configured, it works effectively.
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
 

Room For Improvement

Acunetix needs improvements in false positives, scan speed, integration, flexibility, customization, and compatibility with modern development tools.
Veracode users face false positives, outdated UI, integration issues, slow scans, and desire flexible pricing and improved support.
The main concern is related to false positives; Acunetix needs to work on identifying valid and invalid findings.
Lead Cybersecurity at TBO
Acunetix should have better integration with newer tools such as GitHub and Azure DevOps.
CEO at Xcelliti
I believe Acunetix can improve customer support, as the dedicated support staff are often unfamiliar with problems and troubleshooting, leading to communication gaps that delay issue resolution.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
If it could be integrated directly with code repositories such as Bitbucket or GitHub, without the need to create a pipeline to upload and decode code, it would simplify the code scan process significantly.
We had issues with scanning large applications. Scanning took a lot of time, so we kept it outside the DevOps pipeline to avoid delaying deployments.
Lead Automation Quality Engineer in Leading UK Bank at a consultancy with 10,001+ employees
A nice addition would be if it could be extended for scenarios with custom cleansers.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Setup Cost

Acunetix pricing is high but offers competitive value, with flexible licensing and features justifying the cost for some.
Veracode's pricing is costly, but its features suit large enterprises; smaller businesses should consider alternatives due to budget constraints.
The pricing cost is affordable for small and mid-sized organizations, and when compared to Checkmarx, it is significantly affordable, as Checkmarx is quite expensive.
Lead Cybersecurity at TBO
We secured a special licensing model for penetration testing companies, which is cost-effective.
Information Security Engineer at Tübitak Bilgem
The pricing of Acunetix is pretty expensive and could be improved.
Senior Business Development Manager at Intouch World
It's not the most expensive solution.
Senior Solutions Architect at IDS Comercial
Overall, Veracode's pricing is lower and more scalable than many alternatives in the market.
DevSecOps Engineer at a tech services company with 1,001-5,000 employees
If there's a security gap, you'll never know the cost or effect.
 

Valuable Features

Acunetix offers fast, automated scanning, insightful reporting, and flexibility, efficiently identifying vulnerabilities like cross-site scripting and SQL injection.
Veracode provides comprehensive code analysis, vulnerability management, and integration tools, enhancing security and supporting complex project needs efficiently.
Its most valuable role is in enhancing security by identifying potential vulnerabilities efficiently.
Senior Business Development Manager at Intouch World
The solution is excellent at detecting SQL injection and cross-site scripting vulnerabilities.
CEO at Xcelliti
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers.
Senior Engineer - Penetration Tester at a government with 10,001+ employees
It offers confidence by preventing exposure to vulnerabilities and helps ensure that we are not deploying vulnerable code into production.
Site Leader (India) at Industrial Scientific
The best features in Veracode include static analysis and the early detection of vulnerable libraries; it integrates with tools such as Jenkins.
It fixes issues directly in the IDE while you're doing it.
IT App Security Senior Analyst at a transportation company with 10,001+ employees
 

Categories and Ranking

Acunetix
Ranking in Application Security Tools
12th
Ranking in Static Application Security Testing (SAST)
7th
Average Rating
7.8
Reviews Sentiment
6.8
Number of Reviews
37
Ranking in other categories
Vulnerability Management (19th), DevSecOps (6th)
Veracode
Ranking in Application Security Tools
2nd
Ranking in Static Application Security Testing (SAST)
2nd
Average Rating
8.0
Reviews Sentiment
6.9
Number of Reviews
207
Ranking in other categories
Container Security (8th), Software Composition Analysis (SCA) (3rd), Static Code Analysis (1st), Dynamic Application Security Testing (DAST) (1st), Application Security Posture Management (ASPM) (1st)
 

Mindshare comparison

As of January 2026, in the Application Security Tools category, the mindshare of Acunetix is 2.3%, down from 2.5% compared to the previous year. The mindshare of Veracode is 5.4%, down from 10.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Application Security Tools Market Share Distribution
ProductMarket Share (%)
Veracode5.4%
Acunetix2.3%
Other92.3%
Application Security Tools
 

Featured Reviews

Rahul Kumar - PeerSpot reviewer
Senior Engineer - Penetration Tester at a government with 10,001+ employees
Identifies vulnerabilities across bulk web applications but needs better support and cleaner reports
The best feature Acunetix offers is the centralized dashboard and the quality of reports it generates, which includes various options for selecting reports and developer options for directly sharing the reports with developers. The centralized dashboard of Acunetix gives visibility into the security aspects of mass applications; for instance, with more than 200 applications, it provides a valuable overview of findings and necessary fixes, along with a high-level summary that helps us achieve compliance through monthly and sometimes weekly scanning. In terms of reporting, Acunetix is excellent because it can generate different types of reports, such as an executive summary report, detailed reports, and developer reports that can be shared directly with developers. Acunetix positively impacts my organization by helping identify outdated libraries and applications, including legacy applications vulnerable to old attacks based on OWASP Top 10, thus aiding in compliance checks for PCI DSS and OWASP. Acunetix provides a centralized report with compliance-related aspects and a vulnerability timeline, effectively helping reduce vulnerabilities and save time.
reviewer2703864 - PeerSpot reviewer
Head of Security Architecture at a healthcare company with 5,001-10,000 employees
Onboarding developers successfully while improving code security through IDE integration
Regarding room for improvement, we have some problems when onboarding new projects because the build process has to be done in a certain way, as Veracode analyzes the binaries and not the code by itself alone. If the process is not configured correctly, it doesn't work. That's one of the things that we are discussing with Veracode. Something positive that we've been able to do is submit formal feature requests to them, and they are working on them; they've already solved some of them. This encourages us to propose new ideas and improvements. Another improvement that we asked for this use case is to be able to configure how Veracode Fix proposes and fixes because sometimes it makes proposals using libraries that go against our architecture design made by the enterprise architecture team. For example, we want them to propose using another library, and that's something we already asked Veracode, and they are working on it. We want to specify when you see this kind of vulnerability, you can only propose these two options.
report
Use our free recommendation engine to learn which Application Security Tools solutions are best for your needs.
879,425 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
15%
Financial Services Firm
12%
Manufacturing Company
10%
University
8%
Financial Services Firm
17%
Computer Software Company
14%
Manufacturing Company
10%
Government
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business15
Midsize Enterprise8
Large Enterprise16
By reviewers
Company SizeCount
Small Business70
Midsize Enterprise44
Large Enterprise113
 

Questions from the Community

What do you like most about Acunetix Vulnerability Scanner?
The tool's most valuable feature is scan configurations. We use it for external physical applications. The scanning time depends on the application's code.
What is your primary use case for Acunetix Vulnerability Scanner?
My main use case for Acunetix is using it as a web security and web vulnerability scanner. I use Acunetix in my day-to-day work to perform web vulnerability assessments for our web servers.
What advice do you have for others considering Acunetix Vulnerability Scanner?
I would rate Acunetix a 10 out of 10. I gave Acunetix a 10 because of its accuracy. My advice to others looking into using Acunetix is that it will be one of the best web vulnerability scanners, pr...
Which gives you more for your money - SonarQube or Veracode?
SonarQube is easy to deploy and configure, and also integrates well with other tools to do quality code analysis. SonarQube has a great community edition, which is open-source and free. Easy to use...
What do you like most about Veracode Static Analysis?
I like its integration with GitHub. I like using it from GitHub. I can use the GitHub URL and find out the vulnerabilities.
What is your experience regarding pricing and costs for Veracode Static Analysis?
My experience with pricing, setup cost, and licensing for Veracode is that it is fairly moderate.
 

Comparisons

 

Also Known As

AcuSensor
Crashtest Security , Veracode Detect
 

Overview

 

Sample Customers

Joomla!, Digicure, Team Random, Credit Suisse, Samsung, Air New Zealand
Manhattan Associates, Azalea Health, Sabre, QAD, Floor & Decor, Prophecy International, SchoolCNXT, Keap, Rekner, Cox Automotive, Automation Anywhere, State of Missouri and others.
Find out what your peers are saying about Acunetix vs. Veracode and other solutions. Updated: December 2025.
879,425 professionals have used our research since 2012.