Affordable automated testing tools for securing websites

Affordable automated testing tools for securing websites

Which automated tool can be used for securing a website from hacking inexpensively and easily? Are there any free tools, or hints you could offer?

    Requires Free Membership to View

    When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.

    Hannah Smalltree, Editorial Director

    By submitting your registration information to SearchSoftwareQuality.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchSoftwareQuality.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

There are plenty of "free" Web vulnerability scanners including Wikto and Paros. Even the commercial vendors Acunetix and N-Stalker have free versions of their scanner tools. I have found that you definitely get what you pay for but these free tools can get you started down the right path. Just don't overestimate the value of scanners and underestimate the value of manual testing. The latter will uncover the *other* 40-50% of Web security flaws that the scanners can't find.

I would also like to make mention of the Web 2.0 security testing tutorial available on this site.

Here is a link: Web 2.0 application security troubleshooting, testing tutorial included in this tutorial are links to several free tools, explanations on how to use them as well as troubleshooting advice and videos.

This was first published in October 2009