...ZAP provides automated scanners as well as a set of tools that allow you to find security vulnerabilities manually. It stands between the tester’s browser and the webapplication so that it can intercept and inspect messages sent between browser and webapplication.
Kieker is a framework for continuous monitoring and dynamic analysis of distributed software systems. Being designed for continuous operation, it induces only a low overhead. The TraceAnalysis tool allows to analyze and visualize trace information.
An open-source desktop application for load/performance testing a web site. It has a very simple UI to configure the load test. The future plan includes transaction support, record, playback and support for load injector agents.
Shadowtail is a Java/Spring framework for gathering numerical data (statistics) about a Java application. It is particularly useful as a source of data to feed Orca, the free tool for plotting textual data onto a directory on a Web server.