Mailing the story:
Cenzic extends security umbrella to Ajax
Until now there have been few automated web hacker-testing tools because, to fully automate hacker testing, you have to get access to browser source code. That's not possible with Microsoft, which holds the family jewels to IE.
But it's quite feasible with Mozilla, which is open source. And based on their work with Mozilla, they can simulate what might happen if the user runs IE.