We are looking for a reputable service that will check web sites for potential security holes - particularly application based issues like XSS and SQL injection.

We tried the one-time free scan offered by this site: ScanMyServer.com

Initial results looked promising - just wondered if anyone else has had experience with them. Or are there other services out there that folks are recommending?

Thanks,

--stein

Coalfire.com is good.