ImmuniWeb

Overview

The platform covers web and mobile applications, APIs, microservices, cloud environments, and network infrastructure. Its products divide the work into recurring scans with Neuron, scoped penetration tests with On-Demand, mobile app testing with MobileSuite, and broader monitoring through Discovery. This is a practical fit for teams coordinating multiple security tasks; buyers seeking only a low-cost scanner may find the paid offerings more than they need.

ImmuniWeb traces its beginnings to 2014; ImmuniWeb SA became an independent Swiss corporation headquartered in Geneva in 2019. The company lists ISO/IEC 27001:2022 among standards addressed on its product pages.

Key features

Scanning and testing

Neuron scans web applications and APIs, including authenticated scans, JavaScript crawling, scheduled scans, patch verification, and OWASP vulnerability checks. Its subscriptions permit unlimited scans of the same target or app, which suits repeat checks across builds without a scan-credit ceiling. On-Demand provides web application and API penetration testing, with compliance-oriented reporting and remediation assistance. MobileSuite tests mobile applications and can include their backend APIs or web services.

Discovery and integrations

Discovery combines attack-surface management, continuous security monitoring, third-party risk management, dark-web monitoring, and cyber-threat intelligence. Packages include dashboard and API access, PDF and XLS exports, JSON through a REST API, and 24/7 expert assistance. Integrations include GitHub Actions, GitLab CI/CD, Azure Pipelines, Jenkins, Asana, Jira, Slack, Splunk, Okta, and Microsoft Teams. Discovery addresses monitoring requirements under GDPR, DORA, NIS 2, HIPAA, ISO 27001, SOC 2, and PCI DSS; that makes it relevant to compliance-focused monitoring, not a substitute for evaluating an organization’s full obligations.

Free checks

Community Edition provides no-cost online tests for SSL, email security, website security and privacy, mobile app security, and dark-web and threat exposure. It is aimed at SMEs, colleges, universities, and small municipal governments. That is a useful starting point for basic checks, but it is distinct from the paid subscriptions and penetration tests.

Pricing

Community Edition is free. Neuron scan subscriptions are priced per target or app and allow unlimited scans of that same target or app. Monthly Neuron Mobile and Neuron subscriptions each cost 395.00 EUR per month; annual versions each cost 595.00 EUR per year. The annual prices are lower in total than paying the monthly rate for a year, but the billing terms differ, and the subscriptions remain scoped per app or FQDN rather than covering an unrestricted estate.

Discovery packages have a standard one-year subscription duration and include up to 10,000 assets and/or incidents per company, with additional assets priced flexibly. Dark Web and ASM packages each cost 1495.00 EUR per month. Corporate Pro costs 2495.00 EUR per month and adds 25 TPRM vendors; Ultimate costs 4495.00 EUR per month and includes 100 TPRM vendors. These are substantial recurring commitments, best suited to organizations with a broad monitoring remit rather than teams looking for occasional scans.

On-Demand Corporate Pro costs 5995.00 EUR per penetration test; Ultimate costs 14995.00 EUR per penetration test. A test may cover one or several domains, subdomains, or APIs. The one-time pricing avoids a recurring subscription, but the cost is high enough that buyers should have a defined testing scope and need for the accompanying reporting and remediation assistance. Other paid plans use custom pricing.

Platforms

ImmuniWeb supports Android, iOS, APIs, and web. Deployment is hybrid, which may suit organizations combining hosted services with their own environments.

Who it's for

Choose ImmuniWeb if your organization needs recurring web or API scanning alongside monitoring, mobile testing, or scoped penetration tests, and can match the relevant product to its targets and budget. Community Edition is the sensible entry point for smaller organizations seeking no-cost checks. A team wanting only a free, self-directed scanner should compare focused alternatives instead.

Pros and cons

• Pros: Unlimited repeat scans per subscribed app or FQDN make ongoing verification practical without per-scan charges.
• Pros: Discovery brings attack-surface, third-party, dark-web, and threat monitoring together with API access, exports, and 24/7 assistance.
• Pros: Community Edition offers several kinds of basic security and privacy checks at no cost.
• Cons: Discovery starts at 1495.00 EUR per month with a one-year standard term, a significant commitment for smaller teams.
• Cons: Penetration tests start at 5995.00 EUR per test, so this is not a low-cost option for occasional testing.
• Cons: Neuron subscriptions are limited to a particular app or FQDN, so broad coverage may require multiple subscriptions.

Alternatives

For a focused scanning tool, compare the Web Application Security Scanners list; teams prioritizing exposure discovery can browse Attack Surface Management Software, while buyers comparing security ratings can use Security Ratings Software.

• Nuclei is a free, MIT-licensed CLI for Linux, macOS, self-hosted, and Windows environments; choose it when a standalone open-source tool is preferable to ImmuniWeb’s broader paid platform.
• OWASP ZAP is free and open source, with API and desktop platform support; it suits readers who want a community-contributed open-source option.
• Pentest-Tools.com API Scanner has a free plan and trial, with its NetSec plan starting at 95.00 USD per month for 5 assets; consider it when a lower-priced entry point and asset-based pricing fit better.
• Wapiti is a free, GPLv2 open-source scanner for API and desktop platforms; choose it when free software is the priority.
• Beagle Security offers a free tier with one lite test per month, monthly surface scan reports, and SSL and domain-expiry monitoring; its Essential plan is 99.00 USD per month, making it worth comparing for narrower testing needs.
• ZeroThreat offers five free scan credits on signup, valid for 15 days, then one scan credit per month for one target per account; it may suit a reader wanting a limited free trial of scanning.
• Vega is a free option for Windows, macOS, and Linux.
• Detectify Surface Monitoring is a paid web option.

Verdict

ImmuniWeb is a strong fit for organizations that want scanning, monitoring, and penetration testing capabilities across applications, APIs, and infrastructure, especially when repeat scans and Discovery’s broader monitoring matter. Its free Community Edition is a useful first step, but the high Discovery and penetration-test prices make it a poor match for buyers who need only occasional, inexpensive scanning.