
Description: w3af is an open source web application security scanner. It helps developers and security researchers identify and exploit vulnerabilities in web apps. w3af is designed to find XSS, SQLi, RCE, and other common web app vulnerabilities.
Type: Open Source Test Automation Framework
Founded: 2011
Primary Use: Mobile app testing automation
Supported Platforms: iOS, Android, Windows

Description: Burp Suite is a platform for performing security testing of web applications. It includes tools like an interception proxy, scanner, intruder, repeater, sequencer, and decoder to help test for vulnerabilities.
Type: Cloud-based Test Automation Platform
Founded: 2015
Primary Use: Web, mobile, and API testing
Supported Platforms: Web, iOS, Android, API