After the review of various researcheson web vulnerabilities and security, focused mainly on the survey,scanner, different tools, various tester and detectors of vulnerabilities but not emphases on the prevention techniques to protect against vulnerabilities.