Acunetix

Automated web application vulnerability scanning: Acunetix crawls and tests web applications end to end to discover security weaknesses without manual effort, producing a prioritized list of confirmed findings across the application's pages, parameters, and inputs.

Dynamic Application Security Testing (DAST): It assesses running applications from the outside in, sending crafted requests and analyzing responses to find vulnerabilities that only manifest at runtime, independent of the underlying source language or framework.

Interactive Application Security Testing (IAST) via AcuSensor: An optional server-side sensor (for supported languages) instruments the application during a scan to correlate runtime behavior with the executing code, improving detection accuracy, reducing false positives, and pinpointing the exact line of vulnerable code.

SQL injection detection: Acunetix tests input fields and parameters for SQL injection by injecting payloads and analyzing the application's behavior and responses, identifying both error-based and blind injection points where attackers could manipulate database queries.

Cross-Site Scripting (XSS) detection: The scanner detects reflected, stored, and DOM-based XSS by injecting script payloads and verifying whether they are returned and executed in the browser context, flagging places where attackers could inject malicious scripts.