This page shows the statistics for the top 30 (by alert count) Active Scan rules last month. You can sort on any column - just click on the column headers.
For more details on what the stats mean see the blog post: Monthly Active Scan Rule Statistics
| Alert | Status | Alert Count | False Positive % | Average Time in Secs |
|---|---|---|---|---|
| User Agent Fuzzer | release | 49236946 | 0 | 38 |
| HTTPS Content Available via HTTP | release | 1302648 | 0.002 | 14 |
| SOAP Action Spoofing | beta | 1085055 | 0 | 4 |
| CORS Header | beta | 700203 | 0 | 20 |
| Proxy Disclosure | beta | 586099 | 0 | 37 |
| SQL Injection | release | 522771 | 46.36 | 58 |
| Cookie Slack Detector | beta | 513624 | 0.003 | 7 |
| Hidden File Found | release | 485282 | 0.037 | 12 |
| Backup File Disclosure | beta | 319621 | 0.207 | 46 |
| GET for POST | release | 205573 | 0 | 3 |
| SOAP XML Injection | beta | 187247 | 0.012 | 6 |
| Directory Browsing | release | 180808 | 0.006 | 14 |
| Insecure HTTP Method | beta | 95818 | 0 | 6 |
| .htaccess Information Leak | release | 90420 | 0.002 | 6 |
| Buffer Overflow | release | 82725 | 0.115 | 6 |
| Cross Site Scripting (Reflected) | release | 82437 | 0.003 | 29 |
| Path Traversal | release | 82285 | 0 | 94 |
| Relative Path Confusion | beta | 72792 | 0 | 7 |
| HTTP Only Site | release | 59039 | 0.017 | 1 |
| .env Information Leak | release | 55029 | 0 | 6 |
| Trace.axd Information Leak | release | 52694 | 0 | 6 |
| Format String Error | release | 40299 | 0.01 | 8 |
| Source Code Disclosure - File Inclusion | beta | 39304 | 0.884 | 7 |
| SQL Injection - SQLite (Time Based) | alpha | 36007 | 0.007 | 13 |
| Bypassing 403 | beta | 33684 | 0.157 | 12 |
| HTTPS Configuration | alpha | 24562 | 0 | 10 |
| Parameter Tampering | release | 16158 | 0 | 22 |
| Cross Site Scripting (DOM Based) | release | 15270 | 0 | 176 |
| NoSQL Injection - MongoDB | beta | 14821 | 1.711 | 11 |
| Integer Overflow Error | beta | 14352 | 0.016 | 25 |