What tools would be available to test the security of an Angular Web application? Am I approaching this correctly?

I'm not sure if i'm approaching this correctly, but I'm looking into testing the security of an Angular Web Application.

What tools should I be looking into to give some feedback? I have this web app live in production and uses Windows Authentication for users. I've tried a couple of tools:

https://wapiti.sourceforge.io/

https://www.zaproxy.org/

Wapiti doesn't report any errors, which I believe is wrong.. zaproxy keeps throwing 401 errors when i give it my site URL.

Any help or guidance is appreciated!