RE: OS XSS and SQL scanner

["Mandeep Khera" <mandeep () cenzic com>]

Cherian

I am sorry to hear that you perceive some problems with our product. We take pride in being the most accurate product 
with least amount of false positives in the industry. This has been proven in many bake-offs by customers and 
independent journalists. And, if any of our customers have any issues, we go out of our way to help them in addressing 
any specific issues. 

We would like to work with you and figure out what the issues are. However, we can't find you in any of our databases. 
Since we license based on named users and machine ids, we are not sure why your name is not showing up. Is it possible 
that you have a really old version of the product? Would you be kind enough to contact me directly with your company 
name so we can help you out? 

Thank you,

Mandeep Khera
VP, Marketing
Cenzic Inc.
mandeep () cenzic com
Work - 408-200-0712
 
Voted #1 by eWeek and InfoWorld for Application Security Assessment solutions
http://easypr.marketwire.com/easyir/prssrel.do?easyirid=308DDC21CFAD2E72&version=live&prid=114749&releasejsp=release
 

Selected in SD Times 100 companies 

 


-----Original Message-----
From: Cherian Thomas [mailto:cherian.in () gmail com] 
Sent: Monday, July 31, 2006 3:33 AM
To: webappsec () securityfocus com
Subject: OS XSS and SQL scanner

Hi all,
       Which is the best XSS and SQL scanner (preferably OS) available?
Currently I use Cenzic hailstorm, but too frustrated with its false
positives.
Regards,
Cherian

-------------------------------------------------------------------------
Sponsored by: Watchfire

AppScan 6.5 is now available! New features for Web Services Testing, 
Advanced Automated Capabilities for Penetration Testers, PCI Compliance 
Reporting, Token Analysis, Authentication testing, Automated JavaScript 
execution and much more. 
Download a Free Trial of AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=70150000000CYkc
-------------------------------------------------------------------------



-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.1.394 / Virus Database: 268.10.5/403 - Release Date: 7/28/2006
 

-------------------------------------------------------------------------
Sponsored by: Watchfire

Do you test web applications for XSS, SQL Injections, Buffer Overflows,
Logical issues and other web application security threats? Why not
automate this work with Watchfire's AppScan, the world's leading
automated web application scanner. Download AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=701300000008BP9
--------------------------------------------------------------------------