Are there any open-source tools to measure the standard of a web application project? I want to verify my project for:
- Possible security leaks (SQL Injection etc.)
- Stability (in high concurrent environment)
and other quality metrics.
Software Engineering Stack Exchange is a question and answer site for professionals, academics, and students working within the systems development life cycle. It only takes a minute to sign up.Sign up to join this community
There are many tools, some of them are free.
For Performance testing you can use the YSlow browser plugin which gives you a good overview to start with. Apache JMeter would allow for far more tests with heavy load and if you install it on several machines could test for concurrency. It's scriptable, so you could write very complex user interactions. I haven't used it for some time now, but remember, that it allowed for a lot of options how to test your website. Other alternatives are: Selenium, Watir, HtmlUnit, siege
WebPageTest works in it's free version similar to YSlow, but runs from several servers worldwide and has a few more settings. I don't know, what the payed variant offers, but maybe worth a look.
For SQL Injection there are some tools like NetSparker which can run tests. I didn't use this one by now, but it looks promising.
Exploit-Me is a set of tools for Firefox that can test against several vulnerabilities.