NMAP - www.insecure.org

Nessus - www.nessus.com

Those are the two that I use frequently. There are some others out there, but these get the job done for me.