Zed Attack Proxy (ZAP) is a tool to find security vulnerabilities in web applications.
License: Open Source
Zed Attack Proxy (ZAP) is primarily aimed at security testing with strong automated scanning capabilities, whereas Charles is focused on web debugging and performance testing with robust data visualization. ZAP is open-source and free, while Charles is a commercial product, offering different strengths depending on the user's needs.