I feel your pain. This has happened to one of my clients as well about 6 months ago.
I used this:
Nikto | CIRT.net

I found this open source here:
Top 10 Web Vulnerability Scanners

There are several web scanners for you to choose from. Some of these are even "Open Source" which = to "Free".


Good luck.