- SQLQueryStress - query load testing tool written by SQL Server MVP Adam Machanic.
- SQL Load Generator - run multiple concurrent queries against SQL Server
- HP Scrawlr — This free scanner utility can detect and identify whether your website is susceptible to an SQL injection attack.
- URLScan — This security tool actively restricts the kind of HTTP requests that Microsoft IIS will process.
- Microsoft Source Code Analyzer for SQL Injection — Static code analysis tool for finding SQL Injection vulnerabilities in ASP code
1. Test with real data.
2. Test with real data volumes.
3. Test with a real number of concurrent users.
Also see:
SQL Server Performance Audit Checklist
Tips on ASP.NET Hosting & Deployment