The Old, Backup and Unreferenced Files Detection Accuracy of Web Application Scanners

The current information is based on the results of the *2011/2012/2014/2016* benchmarks (excpet for entries marked as updated or new )

Last updated: 18/09/2016, Currently compares 18 scanners
Sorted in a descending order according to the scanner Old, Backup and Unreferenced Files detection ratio and product name.
Hint: click the version link to get more information about each scanner evaluation, and the product name to get detailed information on the product.

Unified List   Commercial Scanners   Free / Open Source Scanners


Rank
#
LogoVulnerability ScannerVersionVendorDetection AccuracyChart
1
arachni1.1Tasos Laskos100.00% Detection Rate
0.00% False Positives
(184/184)
(0/3)
1
Tinfoil SecurityXTinfoil Security100.00% Detection Rate
0.00% False Positives
(184/184)
(0/3)
2
Netsparker4.1.1.0Netsparker Ltd72.83% Detection Rate
0.00% False Positives
(134/184)
(0/3)
3
Netsparker Cloud2015-06-16Netsparker Ltd69.57% Detection Rate
0.00% False Positives
(128/184)
(0/3)
4
ZAP2.2.2OWASP38.04% Detection Rate
33.33% False Positives
(70/184)
(1/3)
5
Acunetix WVS10.5Acunetix32.61% Detection Rate
0.00% False Positives
(60/184)
(0/3)
6
W3AF1.6W3AF developers22.83% Detection Rate
0.00% False Positives
(42/184)
(0/3)
7
Burp Suite Professional1.7.03PortSwigger22.28% Detection Rate
33.33% False Positives
(41/184)
(1/3)
8
Syhunt Dynamic5.0.0.7Syhunt18.48% Detection Rate
100.00% False Positives
(34/184)
(3/3)
8
Syhunt Mini (Sandcat Mini)4.4.3.0Syhunt18.48% Detection Rate
100.00% False Positives
(34/184)
(3/3)
9
WATOBO0.9.19Andreas Schmidt11.96% Detection Rate
100.00% False Positives
(22/184)
(3/3)
10
QualysGuard WAS2014-01-21Qualys, Inc.11.41% Detection Rate
0.00% False Positives
(21/184)
(0/3)
11
Andiparos1.0.6Compass Security AG6.52% Detection Rate
33.33% False Positives
(12/184)
(1/3)
11
Paros Proxy3.2.13MileSCAN Technologies6.52% Detection Rate
33.33% False Positives
(12/184)
(1/3)
12
IBM AppScan9.0.0.999 / 8.8.0.0IBM Security Systems Division5.43% Detection Rate
66.67% False Positives
(10/184)
(2/3)
13
Wapiti2.3.0OWASP4.35% Detection Rate
100.00% False Positives
(8/184)
(3/3)
14
N-StalkerXN-Stalker2.72% Detection Rate
0.00% False Positives
(5/184)
(0/3)
15
WebInspect10.1.177.0HP Application Security Center2.17% Detection Rate
0.00% False Positives
(4/184)
(0/3)
16
AppSpider6.0Rapid71.09% Detection Rate
0.00% False Positives
(2/184)
(0/3)

Copyright © 2010-2015 by Shay Chen. All rights reserved.
Click here to learn how this information may be published or reused.