Has anyone tried out the open-source web application security assessment tool that Google released? It was developed by their information security engineering team. and it's supposed to "to transparently analyze legitimate, browser-driven interactions with a tested web property and automatically pinpoint, annotate, and prioritize potential flaws or areas of concern." I was just wondering how it compares to some of the other utilities out there.


CoNetrix - Security and Compliance