In addition to increasing their understanding of web vulnerabilities, the most important thing enterprises can do to secure their data is to use web site vulnerability scanning software, and to scan applications every time there is a code change.