Acunetix
Over Acunetix
Acunetix is een oplossing voor het scannen van cybersecurity en webkwetsbaarheid die automatische technologie voor het testen van de webbeveiliging biedt voor het scannen en controleren van complexe, geverifieerde, HTML5- en JavaScript-intensieve websites. Acunetix biedt de mogelijkheid voor het detecteren van meer dan 45.000 webkwetsbaarheden zoals XSS, XXE, SSRF, SQL Injection, host-headerinjectie en meer die de website en gegevens van het bedrijf in gevaar kan brengen.
De kwetsbaarheidsscanner van Acunetix helpt bij het nauwkeurig detecteren van kritieke kwetsbaarheden in de webtoepassing, waaronder open-source software en op maat gemaakte toepassingen. De innovatieve technologieën van de oplossing omvatten DeepScan, die het doorzoeken van AJAX-intensieve SPA's aan de klantzijde (toepassingen van een enkele pagina) ondersteunt, AcuSensor, dat black-box scantechnieken combineert met feedback van sensoren die in de broncode zijn geplaatst, evenals SQL-injectie en scriptingstesten op verschillende locaties. Acunetix heeft ook de mogelijkheid om WordPress-installaties te scannen op meer dan 1000 bekende kwetsbaarheden in de kern, plug-ins en thema's van het platform, terwijl de tool voor het registreren van aanmeldingssequenties het scannen van complexe, met een wachtwoord beveiligde gebieden automatiseert.
Een combinatie van black-box en white-box testen helpt de detectiegraad van een scan te verbeteren en helpt valse positieve resultaten te verminderen, samen met de automatische verificatie van een aantal zeer ernstige kwetsbaarheden. Inzicht per coderegel geeft aan wat de kwetsbare coderegel is en wijst aan wat en waar er moet worden hersteld. Acunetix scant ook netwerkdiensten in de omgeving om gegevensinbreuken te voorkomen, en het test netwerken op kwetsbaarheden en verkeerde configuraties. Geavanceerde functies omvatten handmatige penetratietesttools, automatische configuratie voor webapplicatie-firewall (WAF) en een REST API om Acunetix te integreren in andere aangepaste workflows en processen.
Prijzen vanaf:
US$ 1.995,00/jaar
- Gratis versie
- Gratis proef
- Abonnement
Klanten
- Freelancers
- Kleine bedrijven (2-50)
- Middelgrote bedrijven (51-500)
- Grote ondernemingen (500 en meer)
Implementatie
- Cloudgebaseerd
- On-premise
Ondersteunde talen
Engels
Prijzen vanaf:
US$ 1.995,00/jaar
- Gratis versie
- Gratis proef
- Abonnement
Afbeeldingen
Functies
Totaal aantal functies van Acunetix: 48
Alternatieven
Orca Security
Syxsense
Invicti
Bytesafe
Reviews
Heb je Acunetix al?
Softwarekopers hebben je hulp nodig! Productreviews helpen anderen om goede beslissingen te nemen.
- Sector: Internet
- Bedrijfsgrootte: 11-50 werknemers
- Wekelijks 2+ jaar lang gebruikt
-
Bron van de reviewer
Totaalscore
- Prijs-kwaliteitverhouding
- Gebruiksgemak
- Klantenondersteuning
- Waarschijnlijkheid van aanbeveling 8.0 /10
A well priced, cloud based vulnerability scanner
Beoordeeld op 21-1-2018
Pluspunten
I can schedule daily, weekly or monthly scans of targets which checks for vulnerabilities in our cloud infrastructure from one control panel. The ability to send different types of reports to various parties, for example a 'Board level' report or 'Developer' report is handy for tailoring content to the audience.
Minpunten
It perhaps could be improved by adding a section for commenting on how a vulnerability was fixed and a link to a relevant URL to confirm this. Pricing is good for a small amount of targets, but quickly becomes expensive for multiple target locations.
Antwoord van Invicti
Thank you for your feedback
- Sector: Informatietechnologie en -diensten
- Bedrijfsgrootte: 201-500 werknemers
- Wekelijks 6-12 maanden lang gebruikt
-
Bron van de reviewer
Totaalscore
- Prijs-kwaliteitverhouding
- Gebruiksgemak
- Klantenondersteuning
- Waarschijnlijkheid van aanbeveling 8.0 /10
Simple, but very powerful web vunlerability scanner
Beoordeeld op 13-8-2018
Good thing for a web application pentesting, can give You insight of a present vulnerabilities....
Good thing for a web application pentesting, can give You insight of a present vulnerabilities. Would recommend using in tandem with infrastructure scanner (like Nessus) to create a complete testing solution. Also presence of continous scanning and scheduler could be used for a regular security assesment of Your web applications.
Pluspunten
Ease of use, good customer support, very insightful reports (especially Developer raport), good vulnerability management. Also continous scanning option is an interesting thing for having continous security awareness of Your vulnerability level. Also login sequence recorder is an awesome tool.
Minpunten
Not a lot of scan options to configure - especially in comparison to Nessus - every check is done in default, You can't choose specifically which test is done in selected scan, only the type of scan (full, high-risk vulnerabilities, xss, sqli, weak passwords, crawl only ) or technology in which the scanned web app is written.
Antwoord van Invicti
Thank you for your feedback ¿ we¿re glad that Acuneix is working for you.
Regarding your comment about choosing what to scan for ¿ you can already do this in Acunetix, although the feature is slightly hidden away in Settings > Scan Types. Here you can create your own custom Scan Types, and you will be able to choose which vulnerabilities to check for. When creating a new custom Scan Type, you can filter the vulnerability checks from the top right hand corner of the page.
Remember that you can also easily retest for a specific vulnerability identified in a previous scan.
- Sector: Computer- en netwerkbeveiliging
- Bedrijfsgrootte: 11-50 werknemers
- Dagelijks 2+ jaar lang gebruikt
-
Bron van de reviewer
Totaalscore
- Prijs-kwaliteitverhouding
- Gebruiksgemak
- Klantenondersteuning
- Waarschijnlijkheid van aanbeveling 7.0 /10
Ok tool, but fix your business model and add more settings to the interface
Beoordeeld op 17-8-2018
Continuation of the cons section (number of chars was limited).
* Settings are sometimes unclear,...
Continuation of the cons section (number of chars was limited).
* Settings are sometimes unclear, an info icon with a popup would be nice.
Example 1: In the "Site Structure" of a scan it is possible to press "exclude", does it exlude the path from futre scans? If so why don't I see anything in the target settings? Or does "exlude" exclude vulnerabilities from the report? BTW after pressing exlude I'm not able to "include" it again.
Example 2: "scan speed", how many threads per setting are we talking about?
* Would definitly like to get some more feedback from scans directly in the interface, what is it doing, why did it fail, did all the "allowed hosts" got scanned etc. I know you can debug a target, but this is not what I mean.
Pluspunten
* The number of checks that take place.
* The quality of the issues found.
* After years it is finally possible to pause a scan, hallelujah.
Minpunten
* As a pentester I absolutely miss a more flexible way to configure settings like it was possible in v10. The interface is built as "point a shoot", idiot proof. Currently, If I want to configure things I need to change xml config files on the server and reload acunetix...
* After the release of v12 we were called by a sales agent as we suddently couldn't add targets anymore. The license model suddenly changed completely. The entire business model is now based on scanning an applications continuously over the year. However, as a pentesting business for we mostly scan apps just 1 time for our security assessments. It absolutely makes no sense to apply the same costs! Just like Netsparker, acunetix should have plans for pentesters and consultants.
* Scanning an app that spans multiple domains always results in problems. Currently you have the "Allowed hosts" settings which is crappy in setting up. I need to set all (sub) domains to a different target. And ofcourse with the current business model you are charged per target, lol.
Antwoord van Invicti
Thank you for your honest feedback:
As you rightly say, we try to keep an easy to use interface, with the intention of automatically detecting the best way to scan the site. There are some settings which are not used by most of our customers, and which can be manually tweaked from the settings file.
I think you might have missed the little help icon at the top right corner of the Acunetix interface. When clicked, this provides help on the settings loaded in the current page. But to answer your queries:
Example 1 - When you Exclude a path from the Site Structure, the exclusion will be stored with the Target, and will affect subsequent scans. You can delete the exclusion from the Target settings.
Example 2: this is explained on our website at https://www.acunetix.com/blog/docs/configure-scan-speed-acunetix/. I have forwarded your comment about the scan feedback to the product team.
Regarding licensing, I would suggest that you get in touch with our sales team, who can work
- Sector: Financiële dienstverlening
- Bedrijfsgrootte: 51-200 werknemers
- Wekelijks 2+ jaar lang gebruikt
-
Bron van de reviewer
Totaalscore
- Prijs-kwaliteitverhouding
- Gebruiksgemak
- Klantenondersteuning
- Waarschijnlijkheid van aanbeveling 8.0 /10
Easy to setup, nice results
Beoordeeld op 13-8-2018
As a scanner it is quite good, relevant and well described findings, so far no false positives....
As a scanner it is quite good, relevant and well described findings, so far no false positives. Following an initial trial and PoC with couple of competitors, Acunetix had the best features, most suitable licensing model, good support, so we purchased a three year license. However, at some point, it all changed. The license became based on other criteria, the testing and verification tools were removed, there is no support or way of reverting to a previous version, after you realise that the changes introduced and making the software unusable or insufficient. Overall, unless there are guarantees that it won't happen again, I will be very reluctant to renew.
Pluspunten
Very easy to setup initially, running scans quite fast, good crawler, very nice and understandable results.
Minpunten
The license model changed somehow in the middle of the three years, so it became impossible to continue to use it as planned without paying much more. Tools were removed.
Antwoord van Invicti
Thank you for your feedback.
You can download the free Acunetix Manual Pentesting Tools from https://www.acunetix.com/vulnerability-scanner/free-manual-pen-testing-tools/. You can copy the Request done by Acunetix from the Vulnerability details, and use this in the Acuneix Manual Tools
- Sector: Informatietechnologie en -diensten
- Bedrijfsgrootte: 51-200 werknemers
- Wekelijks 2+ jaar lang gebruikt
-
Bron van de reviewer
Totaalscore
- Prijs-kwaliteitverhouding
- Gebruiksgemak
- Klantenondersteuning
- Waarschijnlijkheid van aanbeveling 9.0 /10
Acunetix always gives me a very good first impression
Beoordeeld op 10-8-2018
Pluspunten
We are using Acunetix now for more than 5 years. It is very easy to create new targets and quickly start automatic scans. The AcuSensor often gives me a good hint where I should take a closer look manually.
Our management likes the well structured reports.
Minpunten
If a web application is very complex, the scanner sometimes does not really manage to find its path through the process.
Since the application changed to the web gui, it is more complicated to specify pre-recorded login sequence. The user has to log into the server, where Acunetix is hostet and start a different application to record the sequence.
Antwoord van Invicti
Thank you for your feedback.
We are planning on integrating the Acunetix Login Sequence Recorder in the Acunetix web UI. This will make it easier to record login sequences moving forward. If all goes well, we will have this feature in place by the end of Q3 / beginning Q4 this year.
Acunetix - Veelgestelde vragen
Hieronder zie je enkele veelgestelde vragen over Acunetix.V. Welke prijsmodellen heeft Acunetix te bieden?
Acunetix kent de volgende prijsmodellen:
- Vanaf: US$ 1.995,00/jaar Prijsmodellen bekijken
- Prijsmodel: Abonnement
- Gratis proef: Beschikbaar
V. Wat zijn de typische gebruikers van Acunetix?
Acunetix heeft de volgende typische klanten:
2-10, 11-50, 51-200, 201-500, 501-1.000, 1.001-5.000
V. Welke talen worden door Acunetix ondersteund?
Acunetix ondersteunt de volgende talen:
Engels
V. Biedt Acunetix ondersteuning voor mobiele apparaten?
Acunetix ondersteunt de volgende apparaten:
V. Met welke andere apps kan Acunetix worden geïntegreerd?
Acunetix kan worden geïntegreerd met de volgende toepassingen:
Bugzilla, GitHub, GitLab, Jira
V. Welke mate van ondersteuning heeft Acunetix te bieden?
Acunetix biedt de volgende ondersteuningsopties:
E-mail/helpdesk, Veelgestelde vragen/forum, Kennisbank, Telefonische ondersteuning
Gerelateerde categorieën
Bekijk alle softwarecategorieën die gevonden zijn voor Acunetix.
