Does anyone know if I buy the unlimited license for SQL Server, if I have to pay separate for their Oracle version?

You can check out the SQLSecurity.com Checklist at: http://www.sqlsecurity.com/DesktopDefault.aspx?tabid=24

I also tried NGSSQuirreL, but it could give me what AppDetective could.  And from what I heard AppDetective 5.0 will be coming out with some built-in scripts and the ability...

The best third party tool out there is AppDetective.  It is offered as a free trial download for 30 days at http://www.appsecinc.com.  If you saw, it even got this...