Introducing ZAP
OWASP ZAP is the world’s most popular web app scanner that now sees over 4 million “Check for Updates” calls per month (up from 1 million just earlier this year).
It is free, open-source, and used by people with a wide range of security experience, ranging from newcomers right up to experienced security professionals to get a better understanding of web application security posture. The way OWASP ZAP works is by attacking your web apps in a similar way to a malicious hacker, where it attacks your apps when they are running and shows you what attackers will be able to find when they attack your app.