I just wrote a column about Fortify Software, which is building tools for eliminating vulnerabilities during the development process. It's a useful approach, but right now priced for the big companies. The technology, which includes a server that scans code for security problems based on a set of evolving rules, needs to be made broadly availalbe. It's far easier than just telling programmers to take a seminar or read a book on coding with security in mind.