Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote -4 down vote favorite

I need to check web security and vulnerability in my web application. Whatever free vulnerability scanners application or vulnerability scan online site's are available?

share|improve this question
2  
planetjake.net/image/data/stop-read-instructions.jpg Please refer to the FaQ. – Lucas Kauffman Dec 28 '12 at 14:04
Requests for lists do not fare well on this forum. That said, I provided an answer... – schroeder Dec 28 '12 at 15:27

closed as off topic by Lucas Kauffman, schroeder, Rory Alsop♦ Dec 28 '12 at 15:53

Questions on IT Security Stack Exchange are expected to relate to IT security within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.

1 Answer

up vote 2 down vote

It can be difficult to know which web app scanner is good, but there is a nearly famous researcher who came up with a way to benchmark various tools:

SecToolAddict

His findings point to:

  • Arachni
  • IronWASP
  • Wapiti
  • W3AF

As high-quality open source scanners.

PLEASE NOTE that no automated scanner can find everything and manual verification and testing also needs to be performed. Automated scanners are good for the "low-hanging fruit" but not for certifying that a site is 'safe'.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.