What is the best software to test server security?

A company I'm affiliated with runs lots of websites for small businesses. Many of them are hosted with out of date wordpess or drupal installations. Others were hack jobs riddled with SQL injection vulnerabilities. What software suites are useful for testing server security and finding holes?