I am completely new to application security testing tools and need help understanding how to evaluate them for our web application.