OWASP ZAP

The world’s most widely used web app scanner. Free and open source. Actively maintained by a dedicated international team of volunteers.