Re: Cenzic Hailstorm vs Rational AppScan from IBM

[David Auclair <d.auclair () UTORONTO CA>]

We've been looking at web vulnerability scanners as well.

I found this review of several of the top scanners (including Cenzic and
AppScan):
http://www.networkcomputing.com/rollingreviews/Web-Applications-Scanners/


David Auclair
Computer Security Administration
Computing and Networking Services
University of Toronto



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Erik Decker
Sent: Thursday, December 11, 2008 1:23 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Cenzic Hailstorm vs Rational AppScan from IBM

All,

We are currently evaluating two web vulnerability scanning products:  Cenzic
Hailstrom and IBM's appscan.

Has anyone ever used Hailstorm before?  If so, do you like their product?
Did you run a comparison against Appscan?

Cenzic seems to be a new player to this market.  Their product seems fairly
robust, but we are a little unsure of it.  Our team has used Appscan in the
past, but we are open to change.

Thanks!
--

----
Erik Decker
Security Administrator
Information Technology Services