App Monitoring
Vulnerability Scanner
Also: attack tool, scanner
An automated tool that probes a site for known weaknesses, used by defenders and attackers alike.
In more detail
Tools such as sqlmap, nikto or nuclei announce themselves in user agents or by their request patterns. Seeing one aimed at your app usually means someone is mapping it before an attack, and it is a cue to check what the scan could have reached.