ZAP, a tool for finding vulnerabilities in web applications
The Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools
and is actively maintained by dedicated international team of volunteers.
It can help you automatically find security vulnerabilities in your web applications
while you are developing and testing your applications.
Its also a great tool for experienced pentesters to use for manual security testing.