DEV Community

Discussion on: Free website vulnerability scanner for developers

adrielaraujoar profile image
Adriel Araujo Author

Hi Antony

Thanks for your questions!

We cover OWASP Top 10 . That means we find a wide variety of flaws, including SQL, LDAP, XPATH and NoSQL injections, Cross Site Scripting flaws, broken session management, remote code and command execution, malware, etc

What scanners are you using, and what is the difference between using them myself versus using your website?

We integrate on-premise, open-source and tailor-made the scanners in the same project (except WPScan because it sucks), we optimize their tests times, executing them in less than an hour, and finally we eliminate most of the duplicate and false positives, so you can see the results in a better UX.