## OWASP ZAP (Zed Attack Proxy)

The "Free Burp Suite". Open Source.

### Quick Start
1.  **Automated Scan**: Type URL, click Attack.
    *   Spider crawls the site.
    *   Active Scanner attacks inputs.
2.  **HUD**: ZAP injects a toolbar into your browser so you can hack while you surf.

### Use Case
Great for CI/CD pipelines. You can automate ZAP to scan your website every night.