scanning

Tools

1. Burp Suite Professionalactive

   Commercial web vulnerability scanner and proxy, drivable via its REST API for automated active scanning.

   Open ↗
2. OWASP ZAPactive

   Free OWASP DAST engine: spider, active scan, OpenAPI import and an access-control add-on for authorization testing.

   Open ↗
3. is-maliciouscloud costpassive

   MIT-licensed Node CLI that sends a project's selected source, config, build, and CI files to TypeSafe Jev and reports suspicious files and line ranges with probabilities; needs a TypeSafe API key and spends paid input tokens.

   Open ↗