#OWASP ZAP

Also: zap, zed attack proxy

Open-source web application security scanner and intercepting proxy. Used for automated and manual security testing, spidering, active scans, and baseline scans in CI pipelines.