hi,

Is there any opensource tool to test web application security for known vulnerabilities ?

How do they compare to tools like AppScan QA ?

Any information is highly appreciated and am sure will shed some light.

Thanks,
Rich.