WebInspect and WebFortify
I am new with using this software we are discussing its use at our company. Used it sometime ago but it has certainly changed since then
1. I read that the software can test web service. Can this be done with an initial scan or does the service WSDL have to be invoked?
2. Can the software scan a stand alone jquery jar file or do you need to have a html/jsp page that references it
I asked these questions as we are trying to determine where the tools need to be implemented. Can the software be scanned as a single one time scan or would it be best tested during the IVV test. And what is the knowledge level of the tester to run this code.