Acunetix Web Vulnerability Scanner

Acunetix has pioneered the web application security scanning technology: Its engineers have focused on web security as early as 1997 and developed an engineering lead in web site analysis and vulnerability detection. Acunetix Web Vulnerability Scanner includes many innovative features:

• AcuSensor Technology
• An automatic client script analyzer allowing for security testing of Ajax and Web 2.0 applications
• Industries' most advanced and in-depth SQL injection and Cross site scripting testing
• Advanced penetration testing tools, such as the HTTP Editor and the HTTP Fuzzer  
• Visual macro recorder makes testing web forms and password protected areas easy
• Support for pages with CAPTHCA, single sign-on and Two Factor authentication mechanisms
• Extensive reporting facilities including VISA PCI compliance reports
• Multi-threaded and lightning fast scanner crawls hundreds of thousands of pages with ease
• Intelligent crawler detects web server type and application language
• Acunetix crawls and analyzes websites including flash content, SOAP and AJAX
• Port scans a web server and runs security checks against network services running on the server  

A free version is available as well, Acunetix WVSFree Edition