Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

I've been poking around the web looking for a web app security scanner I could introduce into by build/QA process to pick up some of the common issues in my applications. The tricky part is that I need it to output some sort of parseable report that maybe could be checked with a Jenkins plugin of some sort.

I know it won't catch all of the issues - that's not what I'm after. I do want something that I can use to catch some of the more obvious ones. Most of the scanners I've seen do a good job of representing this stuff in their GUI, but I need something:

  • headless
  • preferably linux based (and CLI)
  • outputs XML or JSON formatted results

I've seen another question or two on here about this, but they're pretty old (1yr or so) so I figured there'd be advancements since then. Anyone know of any? Thanks in advance.

share|improve this question

closed as not constructive by Polynomial, Terry Chia, Lucas Kauffman, Iszi, Antony Vennard Oct 4 '12 at 14:16

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or specific expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, see the FAQ for guidance.