web-application-security-scan Archives

Top 10 Mistakes when Performing a Web Vulnerability Assessment

In Information Technology there are numerous mistakes, oversights, and blunders that are repeated consistently day after day. But given what there is to lose when it comes to web application security, why not learn from the mistakes of others so you don’t get burned? This blog post lists the top 10 mistakes typical web application security experts do and that you need to be aware of when seeking out the real business risks in your web vulnerability assessments:

How to choose the right web security scanner to reduce false negatives

What are false negatives and why can automated web application security scanners fail to detect a vulnerability? This post explains what false negatives are and what to look for when searching for an automated web vulnerability scanner to ensure that it detects all vulnerabilities without leaving security gaps for malicious attackers to exploit.

How Netsparker solves the challenge of false positives in web vulnerability scans

This web application security blog post explains why false positives are still among the biggest problems of today’s web application vulnerability scanners. You will also learn what the Netsparker team has done to ensure that Netsparker’s web application security solution does not burden users with false positives in web application security scan results.

SVN Digger – Better Wordlists for Forced Browsing with Netsparker Web Application Security Scanner

In this blog post we explain how we built a database of keywords which will be used in Netsparker Web Application Security Scanner when doing forced browsing security checks to try and identify hidden resources in web applications during a security scan.