ZAP (Zed Attack Proxy)
Free open source web application security scanner
Tool overview
ZAP (Zed Attack Proxy), formerly an OWASP project, is a free, open source web application security scanner. It acts as a proxy between the browser and the application, and provides passive and active scanning, spidering, fuzzing and an API for automation in CI pipelines.
ZAP is now an independent open source project, supported by Checkmarx; it is distributed under the Apache licence 2.0.
Technical details
Licence
Open Source
Status
Active
Operating systems / platform
MS Windows, Linux, Mac OS
Pricing model
Free
User Interface
GUI
Useful links
Official website
Source repository URL
Screenshots & video
Community reviews
Login to Write Your ReviewThere are no reviews yet.
Source & attribution
Original contributor
Jean-Baptiste CROUIGNEAU
Original listing URL
External references
https://www.zaproxy.org/
https://github.com/zaproxy/zaproxy
https://github.com/zaproxy/zaproxy


