Syhunt introduced Sandcat for PHP, the first whitebox testing solution featuring both static source code analysis and hardening capabilities for PHP developers. Sandcat for PHP makes developers and QA testers life easier by automatically uncovering multiple classes of application vulnerabilities and also identifying key areas of the code that need review. Sandcat for PHP has been designed to scan PHP applications for various types of issues, such as Cross-Site Scripting (XSS), File Inclusion, SQL Injection, Command Execution and weak validation.
The first version of the tool can detect cross-site scripting, file inclusion, SQL injection, command execution and validation problems. Users are also able to check PHP installations for security issues via an easy-to-use interface.
Pricing begins at $1099 and is based on the number of web applications that require scanning and the number of users that will be performing the security reviews.