Re: [PEN-TEST] Web application testing tools

["Loschiavo, Dave" <DLoschiavo () FRCC CC CA US>]

Sanctum (http://www.sanctuminc.com/) puts a product called AppScan that you
might be interested in. I'm in the process of filling out the NDA so I can
get a demo version. It ain't cheap, but if you need the ability it claims to
offer (and it delivers on the claims) it should be a must-have product.

-----Original Message-----
From: Eaton, Dave
To: PEN-TEST () SECURITYFOCUS COM
Sent: 10/10/00 2:16 PM
Subject: [PEN-TEST] Web application testing tools

I have been asked to look for tools that can be used to test our web
applications, both from a security and a performance standpoint.  I
would
appreciate any comments on existing tools, both commercially available
and
free-ware.  All suggestions and comments welcome.
TIA...... dave


Dave Eaton, Systems Associate
e-Information Services
Eastman Chemical Company
deaton () eastman com  Phone: 423.229.3032