Web scanners report a lot of false positives and can only detect low hanging fruit vulnerabilities. If you have used or evaluated black box scanners you definitely heard this. Though is it true or are these all misconceptions? Watch Paul’s Security Weekly #492 for the answers.