A web application security scanner is program which communicates with a web application through the web front-end in order to identify potential security vulnerabilities in the web application and architectural weaknesses. It performs a black-box test. Unlike source code scanners, web application scanners don’t have access to the source code and therefore detect vulnerabilities by actually performing attacks.
A web application security scanner can facilitate the automated review of a web application with the expressed purpose of discovering security vulnerabilities, and are required to comply with various regulatory requirements. Like every testing tools, the web application security scanner is not a perfect tool, it has strength and weaknesses. Web application scanners can look for a wide variety of vulnerabilities, including:
The following list of products and tools provide web application security scanner functionality.
Commercial Tools
SAAS (Software As A Service) Providers
Free Open Source Tools
Article ID: 402
Created: Mon, Mar 22, 2010
Last Updated: Mon, Mar 22, 2010
Author: Administrator
Online URL: https://www.articlediary.com/article/web-application-security-tools-scanner-applications-402.html