Tools like Paros http://www.parosproxy.org/index.shtml http://www.parosproxy.org/index.shtml will spider/scan for some common attack patterns. It's also defini

Tools like Paros http://www.parosproxy.org/index.shtml http://www.parosproxy.org/index.shtml will spider/scan for some common attack patterns. It's also definitely nice to have a dedicated qa person (preferably someone familiar with the code) trying to break your site, both manually and with tools like Selenium http://seleniumhq.org/ http://seleniumhq.org/