I loaded WebInspect on an IBM ThinkPad laptop (with an Intel Pentium III processor and 256MB of RAM) running Windows XP. I had to update XP to Service Pack 1 for WebInspect to run. The key file, which is delivered separately, is dropped into the program's main directory. The program requires little additional configuration to get started.
Getting started with WebInspect is easy: After installing it, I selected the Scan Wizard and inputted the URL of the Web site that I wanted the program to inspect. There are some options, but the defaults work well. From there, the scan progresses automatically; it can be controlled using VCR-like controls for pausing, stopping, and replaying the scan.
I tested WebInspect against a large system that SpiDynamics maintains for that purpose and ran scans against several Web sites that I maintain. Be warned: The tool can be quite aggressive, and shouldn’t be used against production systems without throttling it back and running pilot tests. I also ran it against a test SOAP service that I deployed for this review.
The standard license key contains the name of the person to whom it is licensed and a range of IP addresses on which the product can be run. SpiDynamics uses these to restrict the usability of the product in case it should get into the wild.