We have 100s of websites which were developed in asp, .net and java... and we are paying lot of money for an external agency to do a penetration testing for our sites to check for security loop holes.
Are there any (good) software (paid or free) to do this?
or.. are there any tehnical articles which can help me develop this tool.