Web Vulnerability testing for the Non-technical

Does anyone know of a resource, site, or service that a person could use to scan their commerce webserver for vulnerabilities? I'm talking about something like that ShieldsUp stuff from GRC.com...something a non-technical website owner could use to verify the security of their site?

I know, I'm asking a lot. I don't believe such a thing even exists, but I figured the group would have more knowledge towards that fact that I would myself. I'm being interviewed for a news article and was asked this question (pre-interview questions, how nice of them) and honestly, I have no clue.

I know that there are serious implications for the host/owner of any such service, the first and most obvious two being #1 how do you know a malicious party isn't using your tool to do recon on target websites, and #2 how do you know a malicious party isn't using your tool to DOS a target website?

Any thoughts, input, or links would be appreciated.

Try these guys, zen:

http://securityspace.com/sspace/index.html

It's been awhile since I used them. They have free trails, you'll need to register.

There's also ScanAlert's "Hacker Safe" "certificate"

WebInspect by SiteDynamics, Wikto by Sensepost, Nikto...

WebInspect can really suck on certain types of sites, and none will do better than manual or partially automated source review. WI isn't free

I'll second the ScanAlert folks. We have used them at my last two jobs... even my CIO (completely non technical) could handle those scans :)

I know you want non-technical, but the OWASP site should be bookmarked and referenced once in a while. The .pdf web development guide is priceless.

http://www.owasp.org/index.php/Main_Page

Thanks guys, you're input was all helpful. Much appreciated, and I'll share the results later, when they are public.