Hi, you may want to try Nessus http://www.nessus.org/ it's free. -----Original Message----- From: Pete Eakle [mailto:pete.eakle@xxxxxxxxx] Sent: Sunday, March 27, 2005 5:21 AM To: users@xxxxxxxxxxxxxxxx Subject: [users@httpd] recommendations for checking website security holes? My company will be announcing a new website soon, and being somewhat new to this game I am concerned about possible site break-ins. I worry that, despite our best efforts, we may still have a vulnerability somewhere that we will find out about the hard way. I was wondering if people could suggest which vulnerabilities are most likely to be exploited, or possibly suggest an article, service or tool, etc. that I could use to test out our site for vulnerabilities? Thanks a lot. -Pete PS: the site will be Apache based and use Tomcat for the dynamic parts. --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx