hackers and php from the hersh corporation

Hi,
I would like to ensure that our php.ini is fully locked down to prevents 
individuals from any exploiting vulnerabilities in our site. 
(hershonline.com) What sites do you recommend to gather this information?

Do you recommend running tools like securitymetrics.com? I ran this on our 
site (hersh) and found no real errors. However, I want to make sure that 
hersh site is fully secure.

Thanks for the advice.

Thanks,
Dale Hersowitz
Hersh Corporaton
hershonline.com