Metis is a open source web security tool that I thought would be of interest to AO members
I personally never played with it. If anyone has let me know how it works out for your tasks of securing web severs

It can be found hereMetis 2.1