OWASP ZAP

OWASP ZAP (Zed Attack Proxy) is a free, open-source web application security scanner. It helps developers and security professionals find vulnerabilities in web applications during the development and testing phases. ZAP can be used as a proxy to intercept and inspect traffic between a browser and a web application, or as a standalone scanner.

It offers automated scanning features, as well as tools for manual penetration testing, such as a fuzzer, a spider, and a port scanner. OWASP ZAP is suitable for anyone involved in building or securing web applications, from beginners to experienced security experts, and can be integrated into CI/CD pipelines.