Re: Which Commercial Web App Scanner?

[Luca Carettoni <luca.carettoni () ikkisoft com>]

On Thursday 15 October 2009, Norma Snockers wrote:
> Netsparker also looks intriguing http://www.mavitunasecurity.com/ - has
> anyone become a beta tester who can comment?

Hi,
    I'm currently testing the latest version of Netsparker and it is really 
promising. You may consider to join the beta.

As a pentester, I really enjoy the focus on exploiting. It is not just a web 
application scanner since you can actually confirm vulnerabilities on demand.
The GUI is well designed and it's easy to use.

Obviously, at this stage, it cannot be fully compared  (in term of software 
maturity) with other commercial scanners (Acunetix, Appscan, ...). 
However, in the next future, it may be the right solution between pure 
automatic scanners and manual tools.

Cheers,
Luca

-- 
Luca Carettoni
http://blog.nibblesec.org

------------------------------------------------------------------------
This list is sponsored by: Information Assurance Certification Review Board

Prove to peers and potential employers without a doubt that you can actually do a proper penetration test. IACRB CPT 
and CEPT certs require a full practical examination in order to become certified. 

http://www.iacertification.org
------------------------------------------------------------------------