My colleague
Debasis has released TA-Mapper tool @
http://coffeeandsecurity.com/resources/tools/tamapper.aspx
TA-Mapper (Time and Attack Mapper) is an effort estimator tool for blackbox security assessment (or Penetration Testing) of applications.
This tool is very useful, when you need to explain\justify efforts at micro level.