Microsoft Web Application Configuration Analyzer

Web Application Configuration Analyzer (WACA) analyzes server configuration for security best practices related to General Windows, IIS , ASP.NET and SQL Server settings. Web Application Configuration Analyzer (WACA) is a tool that scans a server against a set of best practices recommended for pre-production and production servers. The list of best practices is derived from the Microsoft Information Security and Risk Management Deployment Review Standards used internally at Microsoft to harden production and pre-production environments for line of business applications. It include suppressions, saving of suppression files, reporting, multiple reports, export to the Microsoft RED format, and additional SQL rules.