Automated Flash Audit for Web Cybersecurity: Design of a Proactive Vulnerability Scanner
Amandine Martin1, Maxime Billy1, Karima Boudaoud2 and Christian Delettre3
1 Polytech Nice Sophia, Sophia Antipolis, FR (Emails: , )
2 Université Côte d’Azur – Laboratoire I3S-CNRS, Sophia Antipolis, France (Email: )
3 Deltekzen, Valbonne, France (Email: )
DOI: https://doi.org/10.48545/advance2025-fullpapers-1_1
Abstract
Web application security is now a major strategic challenge for companies, whether large corporations or very small/small and medium-sized enterprises (VSEs/SMEs). Threats and attacks are diversifying and multiplying, including data breaches, ransomware, defacements, and intellectual property theft. These cyberattacks have severe repercussions for VSEs and SMEs, which are often not sufficiently protected. Even if reliable solutions such as penetration testing and vulnerability scanning tools exist they are generally expensive, not easy to use and not suitable for non-specialist users. Moreover, European legislation (such as GDPR, NIS2 Directive, Cyber Resilience Act and the Digital Operational Resilience Act) imposes increasing cybersecurity obligations and requirements to companies that must adopt security solutions that are compliant with the legislation. To offer a response to VSEs and SMEs companies (i.e. a solution that is affordable and can be used easily), we propose a platform, called WeakSpotter. This latter was developed to enable these companies to understand cybersecurity challenges and thus correct the vulnerabilities they encounter on their websites.
Keywords
Web Cybersecurity, Vulnerability Scanner, Automated Audit, VSE/SME, Application Security, Open Source, WeakSpotter, GDPR, NIS2