This page shows the statistics for the top 30 (by alert count) Active Scan rules last month. You can sort on any column - just click on the column headers.
For more details on what the stats mean see the blog post: Monthly Active Scan Rule Statistics
| Alert | Status | Alert Count | False Positive % | Average Time in Secs |
|---|---|---|---|---|
| User Agent Fuzzer | release | 48852830 | 0 | 51 |
| HTTPS Content Available via HTTP | release | 1312026 | 0.003 | 17 |
| CORS Header | beta | 848140 | 0 | 20 |
| Proxy Disclosure | beta | 701615 | 0 | 40 |
| Cookie Slack Detector | beta | 673733 | 0.003 | 6 |
| Backup File Disclosure | beta | 599766 | 0.084 | 39 |
| SQL Injection | release | 501141 | 48.53 | 57 |
| Hidden File Found | release | 378023 | 0.06 | 12 |
| GET for POST | release | 174160 | 0 | 4 |
| Insecure HTTP Method | beta | 160520 | 0 | 8 |
| Directory Browsing | release | 155638 | 0.001 | 12 |
| Cross Site Scripting (Reflected) | release | 94171 | 0.038 | 29 |
| .htaccess Information Leak | release | 80966 | 0.002 | 6 |
| Path Traversal | release | 78794 | 0 | 86 |
| Source Code Disclosure - File Inclusion | beta | 73236 | 0.464 | 7 |
| Bypassing 403 | beta | 67734 | 0.062 | 10 |
| HTTP Only Site | release | 62373 | 0.032 | 1 |
| SOAP Action Spoofing | beta | 61345 | 0 | 4 |
| Format String Error | release | 59669 | 0.011 | 7 |
| Relative Path Confusion | beta | 59587 | 0 | 10 |
| Buffer Overflow | release | 56598 | 0.019 | 8 |
| Trace.axd Information Leak | release | 53444 | 0 | 7 |
| .env Information Leak | release | 50855 | 0 | 6 |
| SQL Injection - SQLite (Time Based) | alpha | 41300 | 0.014 | 15 |
| HTTPS Configuration | alpha | 26672 | 0 | 10 |
| Spring4Shell | release | 20947 | 0.001 | 18 |
| Cross Site Scripting (DOM Based) | release | 19996 | 0 | 222 |
| Cross Site Scripting (Persistent) | release | 18696 | 0.057 | 6 |
| NoSQL Injection - MongoDB | beta | 18556 | 1.071 | 10 |
| Anti-CSRF Tokens Check | beta | 17047 | 0.061 | 18 |