comp testing programs [PLEASE READ ME]

Go to:

http://grc.com/default.htm

and scroll down to

ShieldsUP!
"The Internet's quickest, most popular, reliable and trusted, free Internet security checkup and information service. Easily check your system here, and begin learning about using the Internet safely."

Also:

http://tinyurl.com/85lb

Symantec Security Check is a free service designed to help you understand your computer's exposure to online security intrusions and virus threats.

Try Symantec website under security check (FREE)

http://security.symantec.com/ssc/home.asp?j=1&langid=ie&venid=sym&plfid=22&pkj=NDNABMSTHXOAMEQVQCI

Personally, I like to do these type of things myself.
Get a port scanner to scan the ports of the website for your customer. There are hundreds out there, but my favorite is NMAP. You can get it at www.insecure.org/nmap
It was originally a UNIX product, but there are Linux versions and even a Windows port of it.

Next, a tool like Sam Spade is useful (www.samspade.org). It can read the HTTP headers the webserver sends to clients, so you can determine the type of webserver it is. Attacks/vulerabilities can be determined from there.

Speaking of vulnerability, you could get a vulnerability scanner. One decent one is called Retina from the eEye security group (www.eeye.com).

Also, some of us here have been known to help out people with security needs like this. Just ask!

hope this helps