http://security.force.com/security/tools/forcecom/scanner
- Run the Force.com Security Source Scanner to test your Org for a number of security and code quality issues (e.g., Cross Site Scripting, Access Control Issues, Frame Spoofing)
http://security.force.com/security/tools/forcecom/scanner