vendors of application vulnerability scanners advertise their products’
ability to detect the vulnerabilities listed in the OWASP Top Ten. OWASP
published a new version of the Top Ten in May 2007.
Software Security Assurance State-of-the-Art Report (SOAR) 247