Penetration Testing: Re: Web Application Scanners Comparison

[anantasec <anantasec () googlemail com>]

I'm glad I could help.
Yes, this is also my opinion: A tool is only as better as the person using it.
The results from these scanners should be reviewed by a knowledgeable human.
These tools are designed to help (not replace) a human.

It makes me smile when I read on some vendor website: Our tool
"Assures PCI Compliance including 6.6". An automated tool would never
do that.

On 1/28/09, Dotzero <dotzero () gmail com> wrote:
> anantasec,
>
> I just did a quick read of your report. Thanks for making it
> available. I think the main take away for me is that it reconfirms
> that they are just tools and depending on the operator (experience)
> mileage may vary.

-- 
http://anantasec.blogspot.com