After fixing vulnerabilities, must I rerun a complete scan to make sure I've correctly secured my site?
Acunetix WVS allows you to save time, and exclusively target a specific vulnerability class during the automated scan. This is done by choosing a corresponding scanning profile from the scan wizard. In the third stage of the wizard, one can find a list of pre-defined profiles which act as templates for the scanner to determine what tests it should perform. So this is where one can select the profile for SQL Injection, and that will instruct the scanner to only perform tests for that vulnerability class and ignore the others. This will save time, and allow you to accurately test for specific vulnerabilities when focusing on specific fixes.
Also, one can easily create custom scanning profiles from the corresponding node in the Acunetix Tools Explorer.
|