To detect and identify harmful vulnerabilities and security risks that may pose detrimental exposure of confidential
information.
To forewarn website owners that hackers are shifting their attention over to web applications.
To aid the programmer, website developer and administrators who would not be aware of an application that would act as an entry to confidential information.