>There is no reason why you shouldn't be running various security scanning tools against your application during testing/pre-production, such as web application

>There is no reason why you shouldn't be running various security scanning tools against your application during testing/pre-production, such as web application scanners Likely one reason is cost. When each individual tool costs 10k+ with the vendors trying to throw in consulting, it adds up.