Company Overview
Acunetix was founded in 2005 and is headquartered in Valletta, Malta. Co-founded by Tomasz Martyniak and Piotr Pawlowski, Acunetix is a world-leading web application vulnerability scanner (DAST) that automatically detects thousands of web vulnerabilities including XSS, SQL injection, CSRF, and SSRF, with full coverage of the OWASP Top 10.
Acunetix was acquired by Invicti Security (formerly Netsparker) in 2021 and now operates as part of the Invicti family. Known for its scanning speed and accuracy, Acunetix supports CI/CD integration and WAF automation, making it widely adopted in DevSecOps pipelines.
Related provider: Acunetix Security Services
Core Products
| Product | Description |
|---|---|
| Acunetix | Web vulnerability scanner detecting thousands of web security vulnerabilities automatically |
| Acunetix 360 | Enterprise web security scanning platform supporting large-scale scanning and team collaboration |
| Acunetix OVS | Open-source vulnerability scanning integration for seamless open-source project integration |
| Acunetix Network | Network vulnerability scanning covering network-layer security detection |
| Acunetix API Scanning | API security scanning for automated REST/GraphQL API vulnerability detection |
Key Strengths
- Deep Scanning Coverage: Thousands of web vulnerability checks covering OWASP Top 10 and beyond
- Speed and Accuracy: Advanced scanning engine delivering fast results without compromising accuracy
- CI/CD Integration: Native support for Jenkins, GitLab CI, Azure DevOps pipeline integration
- Invicti Ecosystem: Benefits from shared web security best practices as part of the Invicti family
Milestones
| Year | Event |
|---|---|
| 2005 | Founded by Tomasz Martyniak and Piotr Pawlowski in Valletta, Malta |
| 2021 | Acquired by Invicti Security (formerly Netsparker), joining the Invicti product family |
| 2026 | Continues leading the web application security scanning market with an expanding product portfolio |
Market Position
Acunetix's main competitors in the web application security scanning (DAST) market include:
- Qualys WAS: Qualys' web application scanner, integrated within the Qualys Cloud Platform
- Rapid7 InsightAppSec: DAST solution from Rapid7's Insight platform
- PortSwigger Burp Suite: Popular web security testing tool favored by security researchers
- Detectify / HCL AppScan: Other major players in the web security scanning market
- OWASP ZAP: Open-source web application security scanner
