Most of my time these days is spent on creating a dynamic interface for updating benchmark results, and on two major projects aimed at enha...

The following article explains the mechanics of a code injection attack called EL3 Injection in applications that make use of the relativ...

[For a list of the most updated open source, commercial & SAAS scan results click HERE ] The 2014 vulnerability scanner benchmark incl...

After the benchmark publication, several vendors contacted me with recommended configurations that could enhance their score, and with featu...

WAVSEP 2013/2014 Score Chart: The Web Application Vulnerability Scanners Benchmark Commercial, SAAS & Open Source Scanners An Acc...