A tool for automated security scanning of web applications. Many features are also present for manual penetration testing.