Hi,
I was wondering if anyone had any recommendations for software that will detect security holes on Web sites that would allow SQL injections. A client of mine, who has had numerous Web developers throughout the years and whose site is huge, suffered an SQL injection last week and now I'm left going through thousands of files of new and old ASP code to close possible security holes. I'm hoping to find something that will help me speed up the process of identifying these issues.

I did a search on Google but I really don't know which products are good. Anyone know anything about Acunetix Web Vulnerability Scanner? It looks like it may be what I'm looking for but I don't know if their product is reliable.

Thanks,
Jeff

__________________
Jeff T. Severson
J.T.S. Design, Inc.