I've seen quite a few things that are germane, google "static analysis for security",pentesting etc http://pentestlab.wordpress.com/2012/11/27/automated-source

I've seen quite a few things that are germane, google "static analysis for security",pentesting etc http://pentestlab.wordpress.com/2012/11/27/automated-source-code-review/ http://pentestlab.wordpress.com/2012/11/27/automated-source-... https://www.owasp.org/index.php/Static_Code_Analysis https://www.owasp.org/index.php/Static_Code_Analysis http://code.google.com/p/yara-project/ http://code.google.com/p/yara-project/ http://ulsrl.org/ http://ulsrl.org/ http://www.lightbluetouchpaper.org/ http://www.lightbluetouchpaper.org/ (the 3rd post (these aren't the services, these are what you shd read to decide if some service's operatives are appropriately expensive, and up on current research