Sanctum this week announced AppScan 4.0, the latest version of its security-testing tool for analyzing Web and proprietary applications for possible security holes. AppScan 4.0, which adds support for testing for XML and Simple Object Access Protocol vulnerabilities, costs US$15,000 and runs on Windows 2000 and XP servers.