Acunetix is a web application security scanner that automates the process of finding and managing vulnerabilities. It crawls and inventories web assets, including JavaScript-heavy single-page applications, and performs authenticated and unauthenticated scans to detect security weaknesses such as SQL injection, Cross-Site Scripting (XSS), and misconfigurations, mapping findings to standards like the OWASP Top 10. The system uses an intermediary service for out-of-band vulnerability detection and offers an optional IAST sensor to pinpoint vulnerable lines of code. Acunetix classifies findings by severity, provides remediation guidance and proof of exploit, and supports scheduled scanning, multi-user access management, and compliance reporting for frameworks like PCI DSS, HIPAA, and ISO 27001. It also includes a programmatic API for integration into automated workflows.
