This plugin uses w3af (w3af_console to be exact) to find web security issues. See the preferences section for w3af options. Note that OVS is using limited set of w3af options. Therefore, for more complete web assessment, you should use standalone w3af tool for deeper/customized checks.