Building a Web Vulnerability Scanner

Security Audit Tool scans a given URL, detects the software and matches it with the last six months of vulnerabilities. It works by scraping the website and looking for clues that give away the software used. It serves as a reminder of the wide range of software in use that may have dormant vulnerabilities from the front-end JavaScript libraries to back-end caching layers. The best defense is to keep software up and stay alert to new vulnerabilities that could affect your stack. The tool is available on SecAlerts, a free security product that sends subscribers a customised report of vulnerabilities and security news relevant to their software stack.