OWASP ZAP
7.6#1 in web application security scannersFree planFree planAPIExtensionLinuxmacOS
VisitZAP is intended for developers, testers new to security testing, and security testing specialists. Its automation and Docker options also suit teams incorporating scans into CI workflows.
You want what its maker publishes above — check its page for the details.