There were two vendors at SecureWorld conference today in Bellevue that might be worth checking out if you are looking for developer/tester related security products.  They should also be there tomorrow as well - free registration if you are just walking the booths.  Security Innovation sells a fault injection tool called Holodeck and SPI Dynamics sells a tool called WebInspect that has VSTS integration in beta right now.