What vulnerability scan tool is best for applications on Appian Cloud BPM?

I have seen many used. Some examples:
HP Fortify WebInspect
CCS Vulnerability Manager from Symantec Corporation
Trustwave
If scanning, please be sure to follow the Penetration Testing procedure detailed here:
forum.appian.com/.../Appian_Cloud_FAQ.html