hi,
i have heard of tools, like scanners or what ever they are called, that ill scan your site and find security holes, what is your advise on such tools ?
thanks in advanced.
Update: my god i just love this site, in matter of minutes i got all great answers. thank you all :)
These guys have a ASP.NET security checker which is a plug in for Visual Studio and kinda popular if you are interested in Commercial tools
It's always worth running any security tools you have access to, but you can't be lulled into a false sense of security when they give you a clean bill of health. What they are able to check is limited (even if they are database driven). The combination of the complexity of software and the creativity of those with malicious intent means that there's no substitute for "defensive" programming.
If you are interested in the tools that are available, check out this article.