With horror stories prompting increased attention, application vulnerability assessment tools can help security stakeholders make intelligent risk-based decisions, says Nathan Ouellette.