METHODS FOR TESTING THE SECURITY OF WEB APPLICATIONS

Penetration testing is a key method of dynamic security assessment of computer networks, infrastructure, web and mobile applications aimed at identifying and exploiting vulnerabilities by simulating possible attacks by intruders. Traditionally, this process is carried out manually, requiring highly skilled cybersecurity professionals and considerable time to prepare, execute attacks, analyse the results and generate reports. However, with the growing complexity and number of cyber threats, there is a need for automated tools that can speed up the testing process while increasing its efficiency and accuracy. This article provides an overview of modern penetration testing tools, in particular those that use artificial intelligence (AI) methods to improve vulnerability detection and optimise pentesters’ performance. A number of popular commercial solutions are analysed, including RidgeBot, vPenTest, Metasploit Pro, BreachLock PTaaS, Edgescan, Burp Suite Professional, AppCheck, NetSPI, Astra, and Pentest-Tools.com. For each tool, we consider its main capabilities, the platforms it tests on, the main types of vulnerabilities it can detect (such as SQL injection, XSS, CSRF, RCE, etc.), a