HostedScan

Comparison

Acunetix vs. HostedScan

Acunetix is a web vulnerability scanner for smaller AppSec teams, sold under the Invicti brand today. HostedScan scans web apps with OWASP ZAP and adds the network, TLS, and port coverage Acunetix leaves to other tools.

Start your 14-day trialTry a free scan

Try the Premium plan free for 14 days. No credit card required.

At a glance

HostedScan

Acunetix

Starting price

$468 / year, 5 targets

Quote

Scanners

OpenVAS, Nuclei, ZAP, Nmap, SSLyze; Nessus on Professional

Invicti DAST scanner

Internal scanning

Included from Premium

Web apps only, via agent

Trial

14 days, no card

Demo through sales

Differences

What sets HostedScan apart from Acunetix

Infrastructure included

Greenbone OpenVAS, Nuclei, Nmap, and SSLyze scan the servers, networks, and certificates behind the application. Acunetix stops at the web layer.

Per target, published

HostedScan starts at $39 per month billed annually for five targets. Acunetix is quoted with no public price, historically in bundles of 5, 10, or 20 targets.

No install, no license file

Hosted scanners start from the browser. Acunetix on-premises is installed software you maintain on Windows or Linux; Acunetix Premium Online and Acunetix 360 are cloud.

Nessus on Professional

Tenable Nessus for external, internal, and agent scanning on the Professional plan, alongside the open-source scanners.

Inside the product

What you get on day one

Web findings from ZAP next to host findings from Nuclei and SSLyze, so the fix list covers the whole stack behind the application.

See the platform
HostedScan risk list with Nuclei, SSLyze, and OWASP ZAP findings across a URL target and an IP target

Which one fits

Choose HostedScan if

  • You want web apps and the infrastructure behind them in one product.
  • You have fewer than five targets, which is the smallest Acunetix bundle.
  • You want unlimited scans at a published per-target price.
  • You want Tenable Nessus available when an auditor asks.

Choose Acunetix if

  • You need proof-based DAST that confirms exploitability.
  • You pentest web apps and want a single-instance scanner you control.
  • You need IAST sensors alongside DAST.
  • You already license Invicti and want the same scanner.

Capability matrix

Feature by feature

Differences come first. A half circle marks a limited capability, and its note names the limit. Notes about Acunetix link to their source.

Feature

HostedScan
Acunetix

Scanners

Proof-based exploit confirmation

HostedScan: not included.

No exploitation tools. Findings ship with evidence and remediation steps.

Acunetix: included.

Confirms many findings by safe exploitation.

Source

Network CVE scanning

HostedScan: included.

Greenbone OpenVAS and Nuclei CVE scanning plus Nmap TCP and UDP port scans on every plan, and Tenable Nessus on Professional.

Acunetix: partly included.

Network scanning through an OpenVAS integration on the on-premises install, configured separately from the web scanner.

Source

Dedicated TLS and port scanners

HostedScan: included.

SSLyze certificate, protocol, and cipher checks on every plan.

Acunetix: not included.

TLS checks within the web scan only.

Source

Tenable Nessus

HostedScan: included.

Nessus cloud scanning, Nessus scanners for internal networks, and Nessus Agents, all on Professional.

Acunetix: not included.

No Nessus.

Source

IAST sensor

HostedScan: not included.

No IAST sensor. Scanning is black-box from outside the application.

Acunetix: included.

AcuSensor IAST for supported languages.

Source

Coverage

Internal network scanning

HostedScan: included.

An internal scanner runs inside your network on Premium. Nessus scanners and Nessus Agents on Professional.

Source
Acunetix: partly included.

Internal agents reach internal web apps; network scanning depends on the OpenVAS integration.

Source

Reporting and risk management

Health score over time

HostedScan: included.

A health score per target and per account, trended over time.

Acunetix: not included.

No target or account score.

Source

White-label reports

HostedScan: included.

White-label PDF reports with your branding on Professional.

Acunetix: not included.

No white-label option published.

Import results from other scanners

HostedScan: included.

Connect GitHub Dependabot and Snyk, and upload Nmap, OpenVAS, or ZAP results through the API.

Source
Acunetix: partly included.

Imports Burp Suite and other tool output to seed crawls; no import of vulnerability results.

Source

Integrations and API

REST API and webhooks

HostedScan: included.

REST API and webhooks on Premium and above, no add-on fee.

Source
Acunetix: partly included.

REST API documented for Acunetix Premium and Acunetix 360.

Source

SAML SSO

HostedScan: included.

SAML SSO, access controls, and workspaces on Professional.

Source
Acunetix: partly included.

Historically Acunetix 360 only; the Invicti Web + API plan Acunetix now sells under lists SSO.

Source

Licensing, pricing, and support

Published price list

HostedScan: included.

Published plans from $39 per month billed annually. Per-target rates on the pricing page.

Acunetix: not included.

Quote-based. Historically quoted in bundles of 5, 10, or 20 targets; current pricing is by quote.

Source

Start without a sales call

HostedScan: included.

Sign up, add a target, scan. Sales is optional at any size.

Acunetix: not included.

Demo request through sales.

Source

Trial without a card

HostedScan: included.

14-day Premium trial, no credit card.

Acunetix: partly included.

Proof-of-concept licenses arranged through sales.

Source

MSP and reseller program

HostedScan: included.

MSP program with workspaces, white-label reports, and reseller pricing.

Acunetix: not included.

No published MSP program or reseller pricing for Acunetix.

How the two products run

External scanning

Hosted scanners. Add a URL and scan.

Acunetix on-premises installs on Windows or Linux; Acunetix Premium Online and Acunetix 360 are cloud.

Internal scanning

The internal scanner on Premium reaches internal apps and hosts.

Internal agents for web apps behind the firewall.

Scanner upkeep

HostedScan maintains the scanners and syncs the Greenbone feed daily.

Acunetix updates; on-premises installs apply them.

Where data lives

HostedScan cloud with export and API.

On the install host, or Acunetix cloud.

What your team does weekly

Triage one list across apps and infrastructure.

Run and tune web scans, triage findings.

Pricing example

5 web applications with authenticated scanning, plus the hosts behind them

One scenario priced on both products. HostedScan totals come from the published plan and per-target rates. Acunetix figures were checked in September 2026 and link to the source.

HostedScan Premium

$1,308 / year

$109 per month billed annually. 5 targets included.

Premium includes authenticated ZAP scans, API scanning, OpenVAS and Nuclei for the hosts, Nmap, SSLyze, the internal scanner, and the API.

Start your 14-day trialPrice a different size

Acunetix

Quote

Historically quoted in bundles of 5, 10, or 20 targets; current pricing is by quote under the Invicti Web + API plan.

Acunetix pricing page

From our customers

What our customers say

Cyber Security Canada
“HostedScan is our trusted partner for OWASP Top 10 testing and proactive security. Their platform is powerful, but it’s their dedicated support team that truly sets them apart.”

Victor Beitner • Founder

Geekflare
“HostedScan is a unified platform offering multiple scanning tools, and it's reasonably priced compared to leading scanners”
CaseEasy
“I found your platform to be best-in-class for automated vulnerability assessment and reporting. I've already started suggesting it to other software teams.”

Orane Cole • Founder & CEO

Quick Answers

Frequently asked questions

Our knowledge base contains answers to technical questions, and you can always contact us for more details on our plans, pricing, or any questions.

For teams that need web scanning plus infrastructure coverage on a published price, yes. HostedScan runs OWASP ZAP for web and API scanning and adds OpenVAS, Nuclei, Nmap, SSLyze, and Nessus on Professional. Acunetix goes deeper on web app exploit confirmation and adds IAST.

Speed and power,
without the complexity

The world's leading vulnerability scanners, all in one platform.