According to recent studies, 96% of all tested web applications have security vulnerabilities. A whopping 25% of these applications have XSS holes while 23% leak information. The other 48% are vulnerable to website security authentication, authorization, and session management issues, as well as SQL injection and CSRF among other attacks.
You need to periodically test your websites, blogs, and mobile apps for vulnerabilities so you can uncover and fix any issues before it’s too late. Here are 4 FREE and extremely reliable online tools you can use to scan for website security vulnerabilities and malware.
- Siteguarding
Siteguarding is a free online tool that will scan your site for malware and vulnerabilities. It’s a basic scan to help with website security compared to some of the others but it will give you information on your site and check as well to see if it is on any blacklists online.  For WordPress users, it will also identify the version you are using so you can know immediately if you should update. - Quttera
For those looking for an easy-to-use malware detector for website security, Quttera is your answer. Simple yet detailed in its analysis, Quttera allows internal and external monitoring, scheduled and on-demand scans, blacklist checking, detects modified files, uncovers traffic re-directs, malvertising, and generic malware detection among many others. And, if you detect a problem, there are always security experts at hand to help you address the issues right away. - Web Inspector
Web Inspector is a straightforward tool for website security. To check for malware and vulnerabilities, enter your URL into the search box and start the scan. Depending on the size and complexity of the page, as well as the extent of damage, it can take up to five minutes to get results. After the scan is complete, generate a report. You’ll need to first sign up with Comodo Web Inspector first, though. But, don’t worry. Sign-up is free.  UPDATE:  Web Inspector seems to have gone away. A new and value resource is here: Website malware removal - AsafaWeb
This is another very easy to use website vulnerability scanning service. Just copy the URL, paste it into the AsafaWeb search box, and click Scan. You can schedule scans so your site is automatically checked for vulnerabilities perhaps once or twice a week, or even daily.
Final Thoughts on website security
If you’re serious about protecting your website and your customers’ data, pick one tool from this list and begin scanning your site for vulnerabilities now on a regular basis such as every 2 weeks. It’s free and valuable and should be a regular part of the website security you do.
