On: Ask HN: Testing your site for XSS exploits

[lhorie]

Tools like Paros http://www.parosproxy.org/index.shtml will spider/scan for some common attack patterns.

It's also definitely nice to have a dedicated qa person (preferably someone familiar with the code) trying to break your site, both manually and with tools like Selenium http://seleniumhq.org/