OWASP ZAP

OWASP ZAP is a professional-grade web application security scanner. It detects and helps mitigate vulnerabilities like cross-site scripting (XSS), and SQL injection. ZAP’s thorough scanning, proactive testing, and actionable results efficiently improve web applications.