ZAP The Zed Attack Proxy is one of the world’s most popular free security tools and is actively maintained by a dedicated international team of volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing. For more details about ZAP see the new ZAP website at zaproxy.org
FEATURES
SIMILAR TOOLS
ThreatLocker is an enterprise cybersecurity platform that provides comprehensive endpoint protection and zero-trust security to prevent ransomware, viruses, and other malicious software from running on endpoints.
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
QIRA is a competitor to strace and gdb with MIT license, supporting Ubuntu and Docker for wider compatibility.
ConDroid performs concolic execution of Android apps to observe 'interesting' behavior in dynamic analysis.
A security-focused general purpose memory allocator providing the malloc API with hardening against heap corruption vulnerabilities.
APKiD is a tool that identifies compilers, packers, obfuscators, and other weird stuff in APK files.
A PHP port of Rack::Honeypot, a spam trap that detects and blocks spambots
Static application security testing (SAST) tool for scanning source code against security and privacy risks.
A Java API for searching and downloading Android applications from Google Play with additional check-in features for generating ANDROID-ID.
PINNED

Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.