Programmers Stack Exchange is a question and answer site for professional programmers interested in conceptual questions about software development. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are there any open-source tools to measure the standard of a web application project? I want to verify my project for:

  • Possible security leaks (SQL Injection etc.)
  • Performance
  • Stability (in high concurrent environment)

and other quality metrics.

share|improve this question
Depending on the language you are coding in there are many static code analysis tools that will look over your code and warn you of issues like security, compliance, and a lot more. – a1210 Apr 29 '12 at 10:48
up vote 4 down vote accepted

There are many tools, some of them are free.

For Performance testing you can use the YSlow browser plugin which gives you a good overview to start with. Apache JMeter would allow for far more tests with heavy load and if you install it on several machines could test for concurrency. It's scriptable, so you could write very complex user interactions. I haven't used it for some time now, but remember, that it allowed for a lot of options how to test your website. Other alternatives are: Selenium, Watir, HtmlUnit, siege

WebPageTest works in it's free version similar to YSlow, but runs from several servers worldwide and has a few more settings. I don't know, what the payed variant offers, but maybe worth a look.

For SQL Injection there are some tools like NetSparker which can run tests. I didn't use this one by now, but it looks promising.

Exploit-Me is a set of tools for Firefox that can test against several vulnerabilities.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.