Acunetix Web Vulnerability Scanner V.6

"Innovative AcuSensor Technology sets new standards in Web Vulnerability Scanning"

Acunetix, a pioneer on web application security scanning technology, has announced the release of the cutting edge AcuSensor Technology with the launch of version 6.0 of Acunetix Web Vulnerability Scanner, taking web application scanning to a new level. Acunetix is the first and only Web Vulnerability Scanner to implement this innovative technology.

AcuSensor Technology, a brainchild of the Acunetix development team, consists of sensors that are strategically placed inside the web application source code and that send information to the web application scanner on how the applications handle the input during a scan.

The new features of Version 6 are:

• AcuSensor Technology (Application Sensors) – In addition to allowing you to identify more vulnerabilities than with a traditional web application scanner with less false positives, it also indicates exactly where the vulnerability is in your code, and reports debug information.
  
• Blind SQL Injector Tool - Ideal for penetration testers, the Blind SQL injector is an automated database data extraction tool that is perfect for making manual tests that allow further testing for SQL injections. You can read more about this in Chapter 10 of the manual.
  
• Port Scanner and Network Alerts - Perform a port scan against the web server and when open ports are found, Acunetix WVS does complex network level security checks against the service running on that port, such as DNS Open recursion tests, weak SNMP community strings and many other network level security checks. You can also edit these fully scriptable network security tests from the vulnerability editor and also write your own network security scripts.

Acunetix have also made some major improvements with Version 6:

• Pause and Resume now available for scanning and crawling session.-
• Possibility to scan websites protected with NTLMv2 authentication.
• Option to mark an alert as a false positive. The list of false positives can be customized from the application settings.
• The scanner can now generate a list of Uncommon HTTP responses such as Internal Server error – HTTP 500, server stopped responding, etc.
• Option to configure the scanner to stop if a number of network errors occur.
• Possibility to quickly locate vulnerability by using a filter when before it was only possible to search and not filter.
• Compare results tool can now compare Knowledge Base items and list of open ports.
• Much more flexible scheduler; ability to specify a specific day in a weekly or monthly schedule, and ability to also configure all scanning options available through the scheduler.

Two of the key features available with the latest version of Acunetix Web Vulnerability Scanner (WVS) are the Blind SQL Injector Tool and the Port Scanner and Network Alerts.

The Blind SQL Injector Tool is ideal for penetration testers as it is an automated database data extraction tool that allows further manual testing for SQL Injections; while with the Port Scanner and Network Alerts it is now possible to perform port scans against the web server, so that when open ports are found Acunetix WVS does complex network level security checks against the service that runs on that port.

With this new set of innovative features, Acunetix Web Vulnerability Scanner is now an even stronger tool to prevent sophisticated SQL injection attacks like ones launched earlier this year on the websites of the US Department of Homeland Security (DHS), the UK’s Civil Service, the United Nations, Yahoo and BusinessWeek, among others.

Acunetix Web Vulnerability Scanner ensures website security by automatically checking for SQL injection, Cross site scripting and other vulnerabilities. It gives security experts access to a specialized cross site scanning tool that allows them to evaluate their web sites for these threats.

Acunetix Web Vulnerability Scanner also scans AJAX and Web 2.0 technologies for vulnerabilities, gives detailed reports that enable businesses to meet legal and regulatory compliances, analyses against Google Hacking Database (GHDB) and features other advance tools that permit fine tuning of web application security checks.

Acuneti Price List

Back to Software