The Remote File Inclusion Detection Accuracy of Web Application Scanners

The current information is based on the results of the *2011/2012/2014/2016* benchmarks (excpet for entries marked as updated or new )

Last updated: 18/09/2016, Currently compares 19 scanners
Sorted in a descending order according to the scanner Remote File Inclusion (RXSS via RFI) detection ratio and product name.
Hint: click the version link to get more information about each scanner evaluation, and the product name to get detailed information on the product.

Unified List   Commercial Scanners   Free / Open Source Scanners


Rank
#
LogoVulnerability ScannerVersionVendorDetection AccuracyChart
1
Acunetix WVS10.5Acunetix100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
1
IBM AppScan9.0.0.999 / 8.8.0.0IBM Security Systems Division100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
1
Netsparker4.1.1.0Netsparker Ltd100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
1
Netsparker Cloud2015-06-16Netsparker Ltd100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
1
Tinfoil SecurityXTinfoil Security100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
1
WebInspect10.1.177.0HP Application Security Center100.00% Detection Rate
0.00% False Positives		(108/108)
(0/6)
2
N-StalkerXN-Stalker92.59% Detection Rate
0.00% False Positives		(100/108)
(0/6)
3
Burp Suite Professional1.7.03PortSwigger85.19% Detection Rate
0.00% False Positives		(92/108)
(0/6)
4
AppSpider6.0Rapid779.63% Detection Rate
0.00% False Positives		(86/108)
(0/6)
5
Syhunt Dynamic5.0.0.7Syhunt44.44% Detection Rate
0.00% False Positives		(48/108)
(0/6)
6
Ammonite1.2RyscCorp.44.44% Detection Rate
33.33% False Positives		(48/108)
(2/6)
7
JSky (Commercial Edition)3.5.1NoSec22.22% Detection Rate
0.00% False Positives		(24/108)
(0/6)

Copyright © 2010-2015 by Shay Chen. All rights reserved.
Click here to learn how this information may be published or reused.