These tools are also knows as security scanners. I am looking for such open source and free scanners for Ajax driven grails/Java web application that would identify major security flaws such as Injection and XSS Attacks. Such top 10 security risks are identified by OWASP Top 10.
As a bonus question what is Java/groovy source code level scanner for such purpose?