ZAP is open source and one of the most popular security testing tools for web applications which is used to perform penetration testing