A website vulnerability scanner (a.k.a. a website scanner or web application scanner) scans through the pages of a website or web application to detect security vulnerabilities. Such tools are looking for security issues like cross-site scripting, cross-site request forgery (CSRF) or SQL injection. These tools automate the scanning of web applications and test them to search for common security problems. Some offer advanced functions to dive deeper into applications to look for difficult-to-find bugs such as asynchronous SQL injection and blind service-side request forgery (SSRF). Read more.