
Finds security vulnerabilities in web applications, serving both newcomers to security testing and experienced pentesters. It offers automation options for pipelines and a marketplace of community add-ons that extend its scanning features. An independent project maintained by Checkmarx, it is free and open source, so teams can add dynamic security testing without licensing costs.