I actually use this type of app. to secure my ISS servers that I adminstrate. Nothing wrong with the application, only wrong is to what use you will put it too. The one I have checks for about 20,000 vulernabilities and is called N Stealh .

Here is a vulenerability scanner review.
http://archive.devx.com/security/art...I/MS0102-3.asp