I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source tools available for REST?

Secondly, I have worked on SPOCK framework for automated API testing (using Groovy). Is there any way Spock can be used for such purposes?

thanks in advance.

Regards,

I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source tools available for REST?

Secondly, I have worked on SPOCK framework for automated API testing (using Groovy). Is there any way Spock can be used for such purposes?

Thanks in advance.