If you're looking for a code review/ penetration testing service, I'd highly recommend Gotham Digitals. They're based out of NYC, and I believe have offices at other regions/cities too.

If you're looking for "self-service" tools, you might want to look at Nikto (or the Windows equivalent - Wikto). Webscarab and burp proxy are excellent web proxy applications, and are freely available to download and use.

Good Luck!

~@~