Web Application Scanners

Ranking methodology

In development — no version effective yet.

Decision archetype: security · Scores are category-relative (P-01) and commercial relationships never affect rank (P-04).

Tools (3)

A web application security scanner for detecting vulnerabilities such as SQL injection and XSS.

Burp SuitePortSwigger

Web application security testing platform with an intercepting proxy, scanner, and manual testing tools.

OWASP ZAPOWASP Foundation

Open source

An open-source web application security scanner and proxy for finding vulnerabilities manually and automatically.

Some filter definitions for this category are not yet linked to a data field and are hidden until they are.