Well the code is of course available and at the project's page I encourage people to test it and give me feedback. <http://sourceforge.net/apps/trac/arachni/&#6

Well the code is of course available and at the project's page I encourage people to test it and give me feedback. <http://sourceforge.net/apps/trac/arachni/&#62 http://sourceforge.net/apps/trac/arachni/> However I disagree with your remark. I doubt that many people would put in the effort of testing a framework that's under development or even make sense of the debugging messages it'll output or to do a thorough test of all it's features. So I figured it'd be better if I did all the work instead and inform the candidates of any vulnerabilities that Arachni may uncover.