SSCP Web TestEngine demo

Because they can only identify correctly attacks they already know about.

Because they are application-based are more subject to attacks.

Because they can't identify abnormal behavior.

Because normal patterns of user and system behavior can vary wildly.