Vega has quickly become the first tool in my web vulnerability and pen testing arsenal. It’s fast and copiously comes up with more results than any other scanner I’ve come across. It’s also a free (open-source) tool, with a host of great features. It also runs sm on Mac OSX and Linux.