Abstract: Web service is one of the most important Internet applications. However, the types and number of Web security vulnerabilities are increasing, which poses a great threat to users' normal business and information assets. Therefore, the research on Web security vulnerability detection is of great significance. This paper analyzed the communication model and software development architecture of Web applications, introduced the types of Web security vulnerabilities, studied the application of Web security vulnerability detection tool software, and summarized the methods of Web security vulnerability detection. This paper pointed out the shortcomings of the current research, and discussed and prospected the future research direction of Web security vulnerabilities.