OWASP ZAP provides users with useful and performant penetration testing tools for finding vulnerabilities in web applications. It is designed to be used by people with a wide range of security experience and certainly is ideal for developers and functional testers who are new to penetration testing.