There's a new security tool called CAL9000 available over at the OWASP site here
Another one to look into...