Can you recommend a vulnerability checking tool?

Can any of my fellow Indie Hackers recommend a free (or cheap) tool for checking your website for vulnerabilities?

Something that checks for cross-site scripting or cross site request forgery vulnerabilities.

I usually do this sort of thing manually but it's time consuming and easy to miss something.