# Securibench Micro

Securibench Micro is a Static Application Security Testing product. It runs on-premises. Pricing is free.

A collection of vulnerable web application test cases designed to benchmark and evaluate the effectiveness of static security analyzers and penetration testing tools.

Checked October 2026.

## What is Securibench Micro?

Securibench Micro is a collection of small test cases designed to evaluate static security analyzers and runtime security testing tools.

The tool provides a series of vulnerable web applications that can be deployed on standard application servers like Tomcat. Each test case includes a known answer, enabling straightforward comparison and validation of security analysis results.

The test cases contain various security vulnerabilities including:
- SQL injection attacks
- Cross-site scripting (XSS) attacks  
- HTTP splitting attacks
- Path traversal attacks
- Additional common web application vulnerabilities

Originally developed and hosted at Stanford University, the project has transitioned to GitHub for continued development and community access. The tool serves as a benchmark for comparing the effectiveness of different security testing approaches, including both static analysis tools and dynamic penetration testing techniques.

Tags: SQL Injection, Benchmark, XSS, Vulnerable Applications

## Quick facts

- Category: [Application Security](https://cybersectools.com/categories/application-security) · [Static Application Security Testing](https://cybersectools.com/categories/sast)
- Deployment: On-Premises
- Company size fit: Startup, SMB, Mid-Market, Enterprise
- Pricing model: Free
- GitHub stars: 26
- Website: github.com

## Where it ranks

Securibench Micro is not a pick on the current [Best SAST Solutions for Business](https://cybersectools.com/shortlists/best-sast-solutions).

## Securibench Micro FAQ

### What is Securibench Micro?

Securibench Micro is a product in the Static Application Security Testing category. It covers SQL Injection, Benchmark and XSS.

### What is the pricing for Securibench Micro?

Securibench Micro is free. Download and setup instructions are at https://github.com/too4words/securibench-micro/.

### What are alternatives to Securibench Micro?

Alternatives to Securibench Micro listed on CybersecTools:

1. [QuestorAI](https://cybersectools.com/tools/questorai-vulndna) - Neuro-symbolic SAST that finds, proves, fixes and verifies code vulnerabilities (Commercial)
2. [GrammaTech Bug-Injector](https://cybersectools.com/tools/grammatech-bug-injector) - Generates test cases by injecting known bugs into code for testing DevSecOps. (Commercial)
3. [COGICEO Audits de code source](https://cybersectools.com/tools/cogiceo-audits-de-code-source) - Manual and automated source code security audit service based on OWASP ASVS (Commercial)
4. [Flyingduck Code Security Intelligence](https://cybersectools.com/tools/flyingduck-code-security-intelligence) - SAST tool that detects logical flaws and business logic vulnerabilities (Commercial)
5. [Vidoc SecureAI](https://cybersectools.com/tools/vidoc-secureai) - Real-time vulnerability detection and automated fixing for AI-generated code (Commercial)

Compare all Securibench Micro alternatives at [https://cybersectools.com/alternatives/securibench-micro](https://cybersectools.com/alternatives/securibench-micro)

### What deployment and organization size does Securibench Micro fit?

Securibench Micro is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.

## Compare Securibench Micro with similar solutions

- [Securibench Micro vs QuestorAI](https://cybersectools.com/compare/questorai-vulndna-vs-securibench-micro)
- [Securibench Micro vs GrammaTech Bug-Injector](https://cybersectools.com/compare/grammatech-bug-injector-vs-securibench-micro)
- [Securibench Micro vs COGICEO Audits de code source](https://cybersectools.com/compare/cogiceo-audits-de-code-source-vs-securibench-micro)

All alternatives to Securibench Micro: [/alternatives/securibench-micro](https://cybersectools.com/alternatives/securibench-micro)

---

Source: https://cybersectools.com/tools/securibench-micro

For AI agents: every CybersecTools shortlist is listed at https://cybersectools.com/shortlists.md, and any compare page has a Markdown copy too (add .md to its URL).

More on Securibench Micro: funding, momentum, hiring and news, plus the full product and company record, are available through the Mandos MCP Server (paid plans), which connects to AI assistants: https://mandos.io/mcp?utm_source=cybersectools.com&utm_medium=product-md