Released: Acunetix Version 13 build 13.0.200508159

/in , , /by

This new build introduces the Business Logic Recorder (BLR), which allows the user to record logic implemented in multi-step web forms. The Acunetix scanner will go through the multi-step form and will be able to attack each step in the form.  In addition, vulnerabilities can now be sent to Citrix WAF for virtual patching or the Azure DevOps Services issue tracker for further follow-up by the team.  Most vulnerabilities have been updated to include a CVSS 3.1 score.

This update adds a good number of important vulnerability checks and includes various updates and fixes, which are available for all editions of Acunetix.

Find further information on the full set of new features, vulnerability checks, updates, fixes and how to upgrade to the latest build.

 

Alliance Technology Partners is the US Government Distributor for Acunetix.  Call 888-891-8885 option 3 for Acunetix license information,and pre-sales technical questions.

Acunetix Authorized Government Resellers.

Acunetix Version 13 Released!

/in , /by

Acunetix Version 13 (build 13.0.200205121 – Windows and Linux) 5th February 2020 – Acunetix Pricing 

New Features in Acunetix Version 13

  • New Acunetix web UI
  • Network Scanner integration (Improved)
  • Malware Detection using Windows Defender on Windows & ClamAv on Linux
  • Smart Scan
  • New scanning algorithm prioritises scanning tasks and reduces scanning time
  • Proof of exploit is reported in the vulnerability alerts
  • Incremental Scans
  • Vulnerability Confidence Rating for web vulnerabilities
  • Brand New GitLab Issue Tracker Integration
  • Brand New Bugzilla Issue Tracker Integration
  • Brand New Mantis Issue Tracker Integration
  • Ability to create Login Sequence from Selenium script
  • New WADL import file
  • New ASP.NET Webforms import file
  • New Postman import file
  • New Paros import file
  • Ability to create custom checks
  • Highlighting of vulnerability in HTTP response
  • DeepScan provides better support for Angular 2, Vue and React JavaScript Frameworks
  • Unlimited network scanning for Acunetix Premium customers
  • Account Session Timeout settings
  • Account Maximum Consecutive Login Failure settings

New Vulnerability Checks in Acunetix 13

Updates

  • Improved memory consumption for the scanner
  • PDF reports now have page numbers
  • Generic User-agent will be used for communication with issue trackers
  • All lists in Acunetix UI can be sorted
  • Easier filtering options in the Acunetix UI
  • Settings can now be accessed from the side-bar
  • Links discovered by AcuSensor are given more prominence
  • Improved processing of XML and JSON POST input schemes
  • Scanner will try to replay the LSR playback actions a number of times before failing
  • Improved Auto-Login
  • Multiple updates in the Login Sequence Recorder
  • Developer report updated to include Source file, line number and other details provided by AcuSensor
  • Acunetix now supports scanning domains with international characters
  • Increase page size limit to 20Mb in scanner and LSR
  • Improved detection of Possible Sensitive Files
  • Improved detection of email addresses
  • Improved detection of Command Injection
  • Improved detection of database backup files
  • Improved detection of XXE

Fixes

  • Fixed issue in Developer report showing incorrect parameter name for detected vulnerabilities
  • Fixed: “Tester” user role will not be able to create reports
  • upgrades on Linux were not removing all files from previous installation
  • Fixed issue with Manual Intervention
  • Fixed: Session cookies where not always collected by LSR
  • Fixed: Incorrect processing of URLs with “{” character
  • Fixed a number of crashes in scanner
  • Fixed issue causing scanner proxy to unintentionally transform parts of the HTTP request
  • Fixed false positive in the detection of Apache Tomcat Remote Code Execution
  • Fixed issues causing some links not to be properly imported by the importer
  • Fixed issue with license activation when proxy and authentication is used
  • Fixed issue causing session to get lost when Deepscan is used

Acunetix 360 – End-to-End Enterprise Web Security

/in , , /by

Acunetix 360

Vulnerability scanning alone is not enough for a large organization to face present-day security-related challenges. Enterprise requires a comprehensive web application security management platform that allows them to easily find, fix, and prevent vulnerabilities. Acunetix 360 is an end-to-end web security solution that offers a 360 view of an organization’s web security posture. It allows the enterprise to take control of the security of all its web applications, web services, and APIs, ensuring long-term protection.  It starts with the award winning Acunetix scanning engine…

Continuously Protect All Your Web Assets

To start protecting your web assets, you must first know what they are and where they are. Acunetix 360 is a unique solution that can help you find them and never forget about them.

  • Don’t overlook anything. Automatically discover web assets that are owned by your business and/or manually import them.
  • Streamline your processes. Use security policies to continuously monitor & safeguard your web assets.
  • Find every vulnerability & only real vulnerabilities. Don’t waste valuable resources researching false positives.

Make Sure that Every Vulnerability is Fixed

A large organization cannot afford to manually fix every vulnerability. Unlike simpler vulnerability scanners, Acunetix 360 supports your entire workflow.

  • Have the right team address the issue. Integrate with issue trackers to automatically assign tasks to the right person.
  • Include all stakeholders. Keep the right people informed using custom workflows with granular permissions and various communication channels.
  • Don’t let mistakes happen. Automatically retest after an issue has been marked as fixed and, if needed, reassign to the responsible party.

Catch Issues Before They Emerge

The fewer errors make it to production, the better. Make sure to prevent exposure by enforcing vulnerability testing at the right stages of your SDLC.

  • Don’t miss any bugs in your code. Use your proven continuous integration solution to include an incremental vulnerability scan in every build.
  • Quickly pinpoint and fix the problem. The level of detail provided by Acunetix 360 helps you avoid additional research and resource costs.
  • Do it your way. Integration capabilities of Acunetix 360 let you avoid the costs associated with implementing additional solutions.

 

Acunetix Version 12 Released!

/in , , /by

Acunetix Version 12 (v12) is now available and it is a major upgrade!  Here’s what’s new –

  • Scanning speed of up to 2X faster
  • Support for latest JavaScript technologies (ES7)
  • New AcuSensor for Java web applications
  • Pause and Resume scan functionality
  • Exclusion of specific paths in the site’s structure directly from the UI
  • Inclusion of Password Policy features

Acunetix v.12 focuses on more comprehensive and accurate scanning with double the speed!

Here’s the video on Acunetix v12


Acunetix is available On Premise and Online (Cloud)

Call today to learn more!  888-891-8885