Application vulnerability assessment tools scan for web-based or SQL database weaknesses that a simple network vulnerability assessment could easily miss. Justin Peltier reports.