Saturday, March 29, 2014

WAVSEP 2014 Results Update

After the benchmark publication, several vendors contacted me with recommended configurations that could enhance their score, and with feature documentation corrections.
After testing the various provided configurations, I was able to update the various charts and data in the benchmark original post, as well as the various charts in sectoolmarket.

Update summary:
The WIVET score of Webinspect was slightly improved from 94% to 96% by selecting the "depth first" mode in the scan wizard (the default configuration still yields 94%), which makes it the official winner of the WIVET category.

The path traversal detection score of arachni was updated from 30.88% to 100% (!!!) by making use of the source code disclosure plugin (as suggested by the vendor, in addition to the path traversal and local file inclusion plugins), which makes it the co-winner in this category, alongside Appscan.
The LFI detection results of Webinspect were likewise improved from 72.06% to 91.18%, by using vendor recommended configuration that included the following plugins: 10287 – Local File Include, 10271 – Local File Inclusion/Reading Vulnerability, 10272 – Possible Local File Inclusion/Reading Vulnerability, 11327 – LFI Tomcat, 11332 – LFI IIS

Finally, the list of supported input vectors was updated after the Appscan team reported support for 4 more vectors, the ZAP project reported support for additional two input vectors, and the arachni project reported support for one additional vector. All updates represent support in the tested versions.

There may be some minor updates to the SQL injection results of one scanner - if the vendor provided configuration will work.

As mentioned earlier, the benchmark charts already reflect the changes, and summarizing content will be published soon.


  1. Did you try "depth first" on IBM AppScan too?

    1. No, assuming such a feature exists in the product.
      However, I did perform the test while getting support from the appscan development/research team, and at the time of the test, they did not suggest that such a configuration would provide better results.

  2. Nice post you got here. Thanks for sharing.

  3. Thanks, You wrote awesome, I have learn lots of things from your article. It's really helpful for any readers.
    Battery Operated Flow Meter

  4. Security is major concern for all online business. Avyaan being a leading and expert offers highest level of security for web and mobile

    how to secure source code

  5. I really appreciate information shared above. It’s of great help. If someone want to learn Online (Virtual) instructor lead live training in IBM Appscan.kindly contact us
    MaxMunus Offer World Class Virtual Instructor led training on IBM Appscan. We have industry expert trainer. We provide Training Material and Software Support. MaxMunus has successfully conducted 100000+ trainings in India, USA, UK, Australlia, Switzerland, Qatar, Saudi Arabia, Bangladesh, Bahrain and UAE etc.

    For Free Demo Contact us:
    Name : Arunkumar U
    Email :
    Skype id: training_maxmunus
    Contact No.-+91-9738507310
    Company Website –

  6. Thanks for posting the useful information.
    Manasmicro is best Ultrasonic flow meter and ultrasonic water flow meter supplier in pune India.
    ultrasonic flow meter – Manasmicro


  7. افضل شركة تنظيف مجالس بالدمام افضل شركة تنظيف مجالس بالدمام
    شركة تنظيف سجاد بالدمام شركة تنظيف سجاد بالدمام

    افضل شركة كشف تسربات المياه بالمدينة المنورة شركة كشف تسربات المياه بالمدينة المنورة
    شركة كشف تسربات المياه بالاحساء  افضل شركة كشف تسربات المياه بالاحساء

    شركة مكافحة حشرات بالرياض افضل شركة مكافحة حشرات بالرياض
    شركة رش مبيدات بالرياض افضل شركة رش مبيدات بالرياض

    شركة تنظيف كنب بالدمام شركة تنظيف كنب بالدمام
    شركة تنظيف سجاد بالخبر شركة تنظيف سجاد بالخبر
    شركة مكافحة البق بالرياض شركة مكافحة البق بالرياض

  8. This is excellent information. Thanks for sharing.
    Manasmicro is best flow meter supplier in pune India. We supply Electromgnetic flow meter, Industrial flow meter, water flow meter, Portable water flow meter, Digital flow meter, and digital water flow meter.
    water flow meter - Manasmicro
    industrial flow meter - Manasmicro
    portable water flow meter - Manasmicro
    digital flow meter - Manasmicro

  9. Thanks for posting the useful information.
    Manasmicro is one of the best Electromagnetic flow meter manufacturer in pune India. We supply best electromagnetic water flow meter at best price
    Electromagnetic flow meter

  10. Thanks for posting the useful information. is best magnetic flow supplier in all over India. It is the best magnetic flow meter manufacturers company in pune India.
    magnetic flow meter - Manasmicro

  11. Nice Blog. Thanks dear for sharing this interesting information with us and put your thoughts in this blog. Visit for Freight Forwarders and Logistic Shipping Company.
    Logistics Company in Delhi