Netsparker Security Scanner

3 / 5
1 review

Who Uses This Software?

Businesses that use web application (including web services & APIs) should use Netsparker to ensure they are secure. Thanks to its unique automation Netsparker focuses on helping large enterprises.

Average Ratings

1 Review

  • 3 / 5

  • 1 / 5
    Ease of Use

  • 3 / 5
    Customer Service

Product Details

  • Starting Price
  • Pricing Details
    Desktop licensing is per seat and Cloud licensing is per target website.
  • Deployment
    Cloud, SaaS, Web
    Installed - Windows
  • Training
    Live Online
  • Support
    Business Hours

Vendor Details

  • Netsparker
  • Founded 2006
  • United Kingdom

About Netsparker Security Scanner

Netsparker Security Scanner is an accurate solution that automatically identifies XSS, SQL Injection and other vulnerabilities in web applications. Netsparker's unique Proof-Based Scanning Technology allows you to allocate more time to fix the reported flaws by automatically exploiting the identified vulnerabilities in a read-only and safe way, and also produces a proof of exploitation. Therefore you can immediately see the impact of the vulnerability and do not have to manually verify it.

Netsparker Security Scanner Features

  • Asset Discovery
  • Asset Tagging
  • Network Scanning
  • Patch Management
  • Policy Management
  • Prioritization
  • Risk Management
  • Vulnerability Assessment
  • Web Scanning
  • AI / Machine Learning
  • Behavioral Analytics
  • Endpoint Management
  • Incident Management
  • IOC Verification
  • Tokenization
  • Vulnerability Scanning
  • Whitelisting / Blacklisting

Netsparker Security Scanner Reviews Recently Reviewed!

Too much money for a third rate product

Sep 12, 2018

1 / 5
Ease of Use

2 / 5
Features & Functionality

3 / 5
Customer Support

1 / 5
Value for Money
Likelihood to Recommend: 2.0/10 Not

Pros: Netsparker comes with an automation API so it is possible to include it as part of a Continuous Integration / Continuous Deployment (CI/CD) system. It usually works but not always.

Cons: There is almost no documentation about how to use the product. You are expected to open a support ticket and ask how to do some of simplest things and it usually take a day to get a response back from support. Often the response is, "We don't support that", or "We don't have a sample that does that". I one time asked for .Net Framework sample code to pull a report from Netsparker and the answer I got was "Go toe the GUI and select these buttons. The report will download." The problem was I needed to download the reports problematically. Other times I asked for .Net samples and was given Python code. They are the same, correct?

Overall: We are required to run weekly vulnerability scans on many of our production websites and we try to use Netsparker to do these scans. We can schedule when the scans will run and they usually do run. The problem is, if the scan has a problem it must be canceled, otherwise it will never finish and no report will ever be generated.