Free versions of security audit software exist, but they tend to find so many false positives, or problems that turn out to be nothing, that developers stop using these tools.

FORBES: Saving Software From Itself