If you’re in the position of evaluating a web application security scanner, or use one to fulfill a compliance scanning
requirement then you may want to check out an article I wrote describing some of the challenges these products face.
Article Link: http://www.cgisecurity.com/articles/scannerchallenges.shtml
