ZAP by Checkmarx vs. Invicti Web + API (formerly Acunetix)
A side-by-side comparison based on G2 review data.
| Metric | ZAP by Checkmarx | Invicti Web + API (formerly Acunetix) |
|---|---|---|
| Overall rating | 4.7 | 4.1 |
| Review count | 14 | 105 |
| Ease of use | 9.2 | 8.7 |
| Ease of setup | 10.0 | 8.7 |
| Quality of support | 8.3 | 8.2 |
| Meets requirements | 9.6 | 8.5 |
| NPS | 84.615385 | 42 |
| Small Business | 71.4% | 26.7% |
| Mid-Market | 14.3% | 33.3% |
| Enterprise | 14.3% | 40.0% |
| Total page views | 248 | 755 |
| Total LLM citations | 1,478 | 0 |
ZAP by Checkmarx
ZAP by Checkmarx, formerly known as Zed Attack Proxy , is a leading open-source web application security scanner designed to help developers, testers, and security professionals identify vulnerabilities in web applications. Actively maintained by a global community, ZAP offers both automated and manual testing capabilities, making it suitable for users with varying levels of security expertise. Key Features and Functionality: - Automated Security Scanning: ZAP provides simple, single-click automated scanning, enabling users to identify security flaws with ease.
- Ease of Use
- Automation
- Automated Testing
- Scanning Efficiency
- Easy Integrations
- Pentesting Efficiency
Invicti Web + API (formerly Acunetix)
Invicti Web + API (formerly Acunetix) is a dynamic application security testing (DAST) solution that helps security and development teams find and validate exploitable vulnerabilities across web applications and APIs. Built on the same Acunetix technology and expertise customers already know, Invicti Web + API combines fast, accurate scanning with proof-based validation, modern application coverage, and intelligent automation.
- Vulnerability Detection
- Ease of Use
- Vulnerability Identification
- Security
- Accuracy of Results
- Reporting Quality