Web application vulnerability scanner

[PeterJones]

Dear experts,

We are looking for a web application vulnerability scanner for a large organization with thousands of employee. Do you have any recommendations? Thanks in advance.

Regards,
Peter

 

[Nullity]

Nessus and nikto. Nikto is quite dated.

A recent book I read mentioned Burp Suite as a good addition to an involved pen tester that leverages Python for the details.

Unless you spend $$$, there are no respectable point-and-click scanners.



I would advise hiring a security company with a good reputation.

 

[sfx2000]

Rapid7 has good tools on a commercial basis...