This page shows the statistics for the top 30 (by alert count) Active Scan rules last month. You can sort on any column - just click on the column headers.
For more details on what the stats mean see the blog post: Monthly Active Scan Rule Statistics
| Alert | Status | Alert Count | False Positive % | Average Time in Secs |
|---|---|---|---|---|
| User Agent Fuzzer | release | 55992342 | 0.001 | 42 |
| HTTPS Content Available via HTTP | release | 1643072 | 0.002 | 16 |
| Backup File Disclosure | beta | 877384 | 0.039 | 38 |
| CORS Header | beta | 790333 | 0 | 20 |
| Cookie Slack Detector | beta | 690262 | 0.001 | 7 |
| SQL Injection | release | 689683 | 149.28 | 58 |
| Proxy Disclosure | beta | 606097 | 0.002 | 33 |
| Hidden File Found | release | 382895 | 0.087 | 11 |
| GET for POST | release | 178124 | 0 | 4 |
| Insecure HTTP Method | beta | 175057 | 0.009 | 9 |
| Directory Browsing | release | 149802 | 0 | 12 |
| Cross Site Scripting (Reflected) | release | 109589 | 0.023 | 27 |
| Path Traversal | release | 102916 | 0 | 81 |
| .htaccess Information Leak | release | 101358 | 0 | 6 |
| Format String Error | release | 98903 | 0.05 | 8 |
| HTTPS Configuration | alpha | 71899 | 0 | 12 |
| Bypassing 403 | beta | 68938 | 0.07 | 9 |
| .env Information Leak | release | 64963 | 0 | 5 |
| Trace.axd Information Leak | release | 62651 | 0 | 7 |
| Source Code Disclosure - File Inclusion | beta | 59452 | 0.654 | 6 |
| Relative Path Confusion | beta | 57373 | 0 | 6 |
| SOAP Action Spoofing | beta | 55742 | 0 | 4 |
| HTTP Only Site | release | 42464 | 0.167 | 1 |
| Buffer Overflow | release | 40197 | 0.035 | 7 |
| SQL Injection - SQLite (Time Based) | alpha | 37647 | 0.011 | 11 |
| NoSQL Injection - MongoDB | beta | 36083 | 0.547 | 10 |
| Cross Site Scripting (Persistent) | release | 32844 | 0.056 | 5 |
| Cross Site Scripting (DOM Based) | release | 18254 | 0 | 202 |
| Anti-CSRF Tokens Check | beta | 17771 | 0.077 | 6 |
| Spring4Shell | release | 16444 | 0.01 | 16 |