Web Application Vulnerability Scanner adalah alat otomatis yang memindai aplikasi web untuk mencari kelemahan keamanan seperti cross-site scripting, SQL injection, command execution, directory traversal dan konfigurasi server tidak aman. Sejumlah besar kedua alat komersial dan open source yang tersedia dan dan semua alat-alat ini memiliki kekuatan dan kelemahan mereka sendiri. Di sini kami akan memberikan daftar pemindaian kerentanan alat saat ini tersedia di pasaran. Rencananya adalah untuk memperluas daftar ini untuk memberikan informasi tentang masing-masing alat kekuatan dan kelemahan untuk memungkinkan Anda untuk membuat keputusan tentang pemilihan alat khusus untuk memenuhi kebutuhan Anda.
Tools Listing
| Name | Owner | Licence | Platforms | |
| Acunetix WVS | Acunetix | Commercial / Free (Limited Capability) | Windows | |
| AppScan | IBM | Commercial | Windows | |
| App Scanner | Trustwave | Commercial | Windows | |
| AVDS | Beyond Security | Commercial / Free (Limited Capability) | N/A | |
| BugBlast | Buguroo Offensive Security | Commercial | SaaS or On-Premises | |
| Burp Suite | PortSwiger | Commercial / Free (Limited Capability) | Most platforms supported | |
| Contrast | Contrast Security | Commercial / Free (Limited Capability) | SaaS or On-Premises | |
| GamaScan | GamaSec | Commercial | Windows | |
| Grabber | Romain Gaucher | Open Source | Python 2.4, BeautifulSoup and PyXML | |
| Grendel-Scan | David Byrne | Open Source | Windows, Linux and Macintosh | |
| GoLismero | GoLismero Team | GPLv2.0 | Windows, Linux and Macintosh | |
| IKare | ITrust | Commercial | N/A | |
| IndusGuard Web | Indusface | Commercial | SaaS | |
| N-Stealth | N-Stalker | Commercial | Windows | |
| Netsparker | MavitunaSecurity | Commercial | Windows | |
| Nexpose | Rapid7 | Commercial / Free (Limited Capability) | Windows/Linux | |
| Nikto | CIRT | Open Source | Unix/Linux | |
| AppSpider | Rapid7 | Commercial | Windows | |
| ParosPro | MileSCAN | Commercial | Windows | |
| Proxy.app | Websecurify | Commercial | Macintosh | |
| QualysGuard | Qualys | Commercial | N/A | |
| Retina | BeyondTrust | Commercial | Windows | |
| Securus | Orvant, Inc | Commercial | N/A | |
| Sentinel | WhiteHat Security | Commercial | N/A | |
| Vega | Subgraph | Open Source | Windows, Linux and Macintosh | |
| Wapiti | Informática Gesfor | Open Source | Windows, Unix/Linux and Macintosh | |
| WebApp360 | TripWire | Commercial | Windows | |
| WebInspect | HP | Commercial | Windows | |
| SOATest | Parasoft | Commercial | Windows / Linux / Solaris | |
| Trustkeeper Scanner | Trustwave SpiderLabs | Commercial | SaaS | |
| WebReaver | Websecurify | Commercial | Macintosh | |
| WebScanService | German Web Security | Commercial | N/A | |
| Websecurify Suite | Websecurify | Commercial / Free (Limited Capability) | Windows, Linux, Macintosh | |
| Wikto | Sensepost | Open Source | Windows | |
| w3af | w3af.org | GPLv2.0 | Linux and Mac | |
| Xenotix XSS Exploit Framework | OWASP | Open Source | Windows | |
| Zed Attack Proxy | OWASP | Open Source | Windows, Unix/Linux and Macintosh |