OWASP ZAP
Burp Suite
Snyk