Kiuwan
Static application security testing and code analysis platform
Klocwork
Static code analysis and SAST for C, C++, C# and Java
Metasploit
Penetration testing framework
Nessus
Vulnerability assessment scanner
ZAP (Zed Attack Proxy)
Free open source web application security scanner
Paros
Java HTTP/HTTPS proxy for web application security testing