“The tools we'll be using in this workshop are going to be OWASP ZAP, which is my number one favorite for testing applications, and it's probably got the best API in the business.”

Transcript evidence from Abhay Bhargav -- Threat Modeling as Code.