Not too long ago I brought in a vendor to demo software that essentially automated the process of hacking your own application and cataloging the weaknesses.  I thought this was a great idea.  As usual it was shot down.  I swear I don't know what these people are thinking.