OWASP ZAP

Dynamic Application Security Testing (DAST) -  OWASP ZAP (Zed Attack Proxy)