Veracode is a code review and security verification tool. It is a commercial tool. It has provision to do both static code review and dynamic analysis. It’s an online tool. It can be used in various stages of software development life cycle (SDLC). For more details about this tool, go to http://www.veracode.com/solutions/secure-development-securityreview.
See this article for the other code review tools I’ve used for .Net web application development.