OWASP ZAP

Web App Pentest

A free, open-source web application security scanner (Zed Attack Proxy) maintained by the OWASP community, popular for both manual testing and CI automation.

Category: Web App Pentest
Reference: OWASP