Softwr

Software · head to head

Acunetix vs Qualys VMDR

Acunetix logo

Acunetix

Software

Web application security testing made easy

From
On request
Rated
-
Qualys VMDR logo

Qualys VMDR

Software

Vulnerability management, detection, and response

From
$3/month
Rated
-

The short version

  • Each has a real cost: Acunetix aWS Marketplace lists Acunetix Online Premium, published by seller Invicti Security, at $7,000 per year for 5 targets under a 12 month contract, where a target is one fully qualified domain, website, web app, API or web service; Qualys VMDR listed on UK G-Cloud at £18.75 to £61.58 per device per year for the Qualys Cloud Platform and VMDR, via reseller Barrier Networks Limited
  • They diverge on capability: Acunetix covers DAST scanning, Qualys VMDR covers Vulnerability scanning.

Where they differ

Only the attributes on which Acunetix and Qualys VMDR actually diverge.

Attributes where Acunetix and Qualys VMDR differ
AttributeAcunetixQualys VMDR
Starting priceOn request$3/month
PlatformsDesktop, Web, ApiWeb, Cloud, Api
Founded20051999

Identical on both: pricing model (subscription), free tier (No), user rating (Not yet rated), category (Unknown).

What each one covers

Drawn from each product's published feature list. An absence here means we hold no record of it - not that the product lacks it.

Only in Acunetix

  • DAST scanning
  • IAST technology
  • AcuSensor
  • JavaScript security
  • SQL injection testing
  • XSS detection
  • OWASP Top 10
  • API security testing

Only in Qualys VMDR

  • Vulnerability scanning
  • Threat detection
  • Asset discovery
  • Compliance checking
  • Remediation tracking
  • Cloud asset visibility
  • API access
  • Custom policies

Both cover

  • Jira
  • Slack
  • ServiceNow

What people use each for

The jobs each tool is most often brought in to do.

Acunetix

  • Vulnerability Scannernot Qualys VMDR
  • Web Securitynot Qualys VMDR
  • Dastnot Qualys VMDR

Qualys VMDR

  • Vulnerability Managementnot Acunetix
  • Asset Managementnot Acunetix
  • Compliancenot Acunetix

Where each one falls short

Documented limitations, not opinions. Every one is a constraint you would hit in normal use.

Acunetix

  • AWS Marketplace lists Acunetix Online Premium, published by seller Invicti Security, at $7,000 per year for 5 targets under a 12 month contract, where a target is one fully qualified domain, website, web app, API or web service
  • AWS Marketplace's Invicti listing shows Premium Support priced separately at $150,000 per year and Premium Support with Guided Success at $300,000 per year, on top of the base scanning licence

Qualys VMDR

  • Listed on UK G-Cloud at £18.75 to £61.58 per device per year for the Qualys Cloud Platform and VMDR, via reseller Barrier Networks Limited

Pricing, plan by plan

Acunetix

On request
  • StandardFree
    • Single user
    • 5 targets
    • Scheduled scans
  • PremiumFree
    • Multiple users
    • Unlimited targets
    • CI/CD integration
  • Acunetix 360Free
    • Enterprise features
    • SDLC integration
    • Custom workflows

Qualys VMDR

$3/month
  • VMDR$3/month
    • Per asset
    • Vulnerability scanning
    • Detection
  • VMDR+$5/month
    • All VMDR features
    • Advanced analytics
    • Cloud integration
  • VMDR Complete$7/month
    • All VMDR+ features
    • Threat intel
    • Response automation

Which should you pick?

Choose Acunetix if

  • You need dast scanning.
  • You work on Desktop, Web, Api.
  • You also want iast technology.

Choose Qualys VMDR if

  • You need vulnerability scanning.
  • You work on Web, Cloud, Api.
  • You also want threat detection.

Questions people ask

Is Acunetix or Qualys VMDR better?
Neither clearly leads. Acunetix starts at On request and Qualys VMDR at $3/month, and user ratings are close enough to be indistinguishable. Choose on capability and platform support.
Which is cheaper, Acunetix or Qualys VMDR?
Acunetix starts at On request and Qualys VMDR at $3/month.
Does Acunetix or Qualys VMDR run on more platforms?
Acunetix runs on Desktop, Web, Api. Qualys VMDR runs on Web, Cloud, Api.
What is Acunetix best used for?
Acunetix is most often used for vulnerability scanner, web security, dast. Of those, vulnerability scanner and web security are not what Qualys VMDR is typically brought in for.
What can Acunetix do that Qualys VMDR cannot?
Acunetix covers DAST scanning, IAST technology, AcuSensor, JavaScript security. Qualys VMDR covers Vulnerability scanning, Threat detection, Asset discovery, Compliance checking. Both handle Jira, Slack, ServiceNow.

Related pages

Other head to heads