You can check OWASP ZAP https://www.owasp.org/index.php/OWASP_Zed_Attack_Proxy_Project