> How do you test to make sure your web server is as secure as it can be?

There are various security scanning tools that you could try.
http://www.cirt.net/code/nikto.shtml