Online scan
http://security.force.com/security/tools/forcecom/scanner#

Eclipse Scan
http://www.apexscanner.com/

https://www.apexscanner.com/EclipsePlugin/UserGuide.aspx