Testing your site for XSS exploits
lhorie: Tools like Paros http://www.parosproxy.org/index.shtml will spider/scan for some common attack patterns.It's also definitely nice to have a dedicated qa person (preferably someone familiar with the code) trying to break your site, both manually and with tools like Selenium http://seleniumhq.org/