We think it's time to commoditize PHP web application security. You may have heard of Chorizo!.
With this free account, it's possible to use the Chorizo! application service as a proxy and scan 1 host. All scan datas are encrypted, your data is only visible to you. There are also some valuable help documents available that explain the whole process from registering up to uploading the signature file onto your host and how to analyze the results.
They also have a commercial version that includes: the Advisor software to help you correct the issues found, a more detailed report analyzer, and a PDF export of the reports.