Security researcher Shay Chen maintains an up-to-date and exhaustive list of both commercial and open-source web application security scanners [REF].
The WAVSEP platform is publicly available and can be used to evaluate the various aspects of web application scanners: technology support, performance, accuracy, coverage and result consistency [REF].