Burp Suite is PortSwigger's commercial toolkit for testing web application security.
The ZAP by Checkmarx Core project