Free security-testing tools or service for developers

ZAP (Zed Attack Proxy)

Open-source tool with numerous features like dynamic analysis, fuzzing, session handling, and reporting. Supports HTTP, SOAP, and REST APIs.

Tags: testing, security-testing, security