Free and open source web app security scanner
OWASP Zed Attack Proxy (ZAP) is the world's most widely used free web application security scanner, maintained by the OWASP Foundation. It provides automated scanners, passive scanning, intercepting proxy, fuzzer, and API testing capabilities suitable for both beginners and experienced testers.