The OWASP Zed Attack Proxy (ZAP) is one of the world’s most popular free security tools and is actively maintained by a dedicated international team of volunteers. It can help you automatically find security vulnerabilities in your web applications while you are developing and testing your applications. It's also a great tool for experienced pentesters to use for manual security testing. ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications. ...
An open-source desktop application for load/performance testing a web site. It has a very simple UI to configure the load test. The future plan includes transaction support, record, playback and support for load injector agents.
Shadowtail is a Java/Spring framework for gathering numerical data (statistics) about a Java application. It is particularly useful as a source of data to feed Orca, the free tool for plotting textual data onto a directory on a Web server.