I tried scanning my web application built with AngularJS front-end and PHP backend. But scanning with scanners like Nessus and Websecurify fails due to '#' in URL. My URL has format


Anyone can suggest a good vulnerability scanner for scanning AngularJS web application?

2 Answers 2


Have you looked at AppCheck-NG? Their scanner is purpose built for detecting and reporting on web application vulnerabilities.


Here are some recommendations and a general overview of what we have used in the past and how we found their performance.

Burp Suite: Their new JS scanner just got a whole lot better, and can handle this now

OWASP ZAP: Has an AJAX spider that's been OK to use

ESLint: Has some angular rules that can be found from the link

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.