Is there any web apps that finds your site's security flaws
yan: No web app, but a lot of individuals who'd love to offer this as a service. For general guidelines on writing secure web code, refer to http://www.owasp.org