AppSec tools

[it_strategy () hotmail com]

Any opinions on: 

- High end tools such as WatchFire AppScan, Cenzic Hailstorm, SPI Dynamics, etc..

- Mid range tools such as Accunetix

- Open source tools such as Paros Proxy, Nikto, etc...

- Compare and contrast relative VALUE of each option? 

Thanks!

-------------------------------------------------------------------------
Sponsored by: Watchfire

Do you test web applications for XSS, SQL Injections, Buffer Overflows, 
Logical issues and other web application security threats? Why not 
automate this work with Watchfire's AppScan, the world's leading 
automated web application scanner. Download AppScan today!

https://www.watchfire.com/securearea/appscancamp.aspx?id=701300000008BP9
--------------------------------------------------------------------------