Open-source web application security solutions are less secure because anyone can change the code that you are using. Such solutions also do not offer any support. Lastly, free web application security solutions are designed for use by manual penetration testers and have very limited automation capabilities if any at all.
Read more about the relationship between vulnerability scanning and penetration testing.