The Google security team has released a free, open-source Web app security assessment tool capable of flagging vulnerabilities and potential security threats in Internet-facing applications.
The tool, called Ratproxy, is described as a passive Web application security audit tool designed toanalyze legitimate, browser-driven interactions with tested Web applications — to automatically pinpoint, annotate, and prioritize
potential flaws [...]



http://feeds.feedburner.com/~r/zdnet/security/~3/324502228/