Web applications are a part of everyone’s daily life and are a means of accessing useful services to make life more convenient. These days though web attacks and taking advantage of web applications is extremely common. This harms both the website owners and the users of the website as it leads to data leakage and security breaches. This paper is about using tools to find out website vulnerabilities. Two tools have been used, ZAP (zed attack proxy) and Burp Suite. The paper focuses on E-commerce websites. The analysis shows that a website that is vulnerable by design is 21.8% more vulnerable than the weakest E-commerce website and 65.3% more vulnerable than the strongest E-Commerce Website that we have tested. The average difference in vulnerability was 42.45%. The results, in a summary, of this paper lead to insights into how different E-commerce websites have different vulnerabilities and how an attacker might take advantage of them to disrupt the normal workings of the website or get access to data. In conclusion, we can say that most E-commerce websites are secure enough against attacks compared to vulnerable websites but still have vulnerabilities that can be exploited by attackers.