I am new to security testing. I have been able to set things up for web applications. I want to run automated scans for my REST API. Burpsuite is a good tool but is not free. Are there any open source tools available for REST?
Secondly, I have worked on SPOCK framework for automated API testing (using Groovy). Is there any way Spock can be used for such purposes?
Thanks in advance.