OWASP ZAP

World's most widely used open-source web app security scanner for finding vulnerabilities.