Web Application Security Scanner Comparison

Intro to web application security scanners.

Web application security scanner comparison.

They can catch cross site scripting sql injection path traversal insecure configurations and more. Web scanner comparison an interesting report has been released that takes a sample of web application security testing applications and puts them up against each other. In the past weeks i ve performed an evaluation comparison of three. Popular web vulnerability scanners this evaluation was ordered by a penetration testing company that will remain anonymous.

These tools work on a similar principle as vulnerability scanners. The vendors were not contacted during or after the evaluation. It is a test that compares the features coverage vulnerability detection rate and accuracy of automated web application security scanners also known as web vulnerability scanners or dynamic application security testing dast solutions. It will also test vulnerabilities for website components such as web servers web server.

The most notably thing is how much the results vary and how many vulnerabilities most scanners miss. A web application security scan will reveal vulnerability to sql injection installation path disclosure command execution net exception php code injection script language error url redirection remote file inclusion cookie manipulation and more. However hackers always look ahead to breach into corporate information and application to steal confidential and critical information. Individual tests were conducted by the independent information security researcher and analyst shay chen.