Use Web Application Scan Tool
Web application scan tools are used to scan web applications for SQL injection, cross site scripting, sensitive data, etc.
There is no guarantee that a web application scan tool will not affect services on a production web application. Therefore it is important that the affected application have a maintenance window schedule agreed to by management or other pertinent personnel. If availability is too critical to have a window, then redundancies should be created.
Contact University Information Security for more information on web application scan tools.