In recent years, web security has been regarded in terms of protecting the web application layer from unauthorized
users' attacks. As our reliance on technology grows exponentially, security becomes increasingly important. The main objective
of this paper is to provide knowledge about web application layer vulnerabilities, their prevention methods and to perform a
comparison of the latest tools and mechanisms used to detect these threats and vulnerabilities.