More and more people and organizations are using the Internet for critical business transactions;  However, this success becomes its own worst enemy.  Motivated attackers have turned their attention to Web-based business applications.  These custom applications are now being attacked and exploited.

Enterprises are responding to this new threat by hardening Web applications, and they are increasingly turning to Web application security assessment tools to improve the security of their applications. One of the key requirements for the security code review tools is high accuracy.

This document examines why accuracy is critical to the effectiveness of the tools, and it discusses how Cenzic Hailstorm addresses this problem.