AppScan is a dynamic application security testing tool used for penetration testing to find vulnerabilities by actively probing applications. Ounce and DevInspect are static analysis tools, FXCop analyzes .NET code for patterns, not penetration testing.