Zed Attack Proxy (ZAP) is a free flexible and extensible open-source penetration testing tool, designed specifically for testing web applications