Burp Suite
Toolkit for web application security testing
Nuclei
Template-based vulnerability scanner
Semgrep
Fast static analysis with rules that look like code
Trivy
Scanner for vulnerabilities, misconfigurations and secrets
Snyk
Security platform for code, dependencies, containers and cloud configurations
OWASP Dependency-Check
Software composition analysis for known vulnerable dependencies