Best Web Application Scanner Finds 15.3% of Vulnerabilities

Picked up from SecurityBuddha.com:

http://www.virtualforge.de/whitepapers/web_scanner_benchmark.pdf

Reminds me of the presentation on the OWASP event:

Automated Web FOO or FUD? (David Kierznowski)

We take a look into automated web application testing technologies and their effectiveness against real life applications.

Scanners are nice complementary tools but it can't replace your brain.